Customer Coupons For Woocommerce
Monthly
Missing authorization in the VillaTheme Customer Coupons for WooCommerce plugin, affecting versions through 1.3.14, allows an authenticated low-privilege user such as a registered customer to perform a sensitive coupon-related action without the required permission check. The flaw is rated CVSS 4.3 (Medium) with limited integrity impact only-no confidentiality or availability impact-and no public exploit has been identified at time of analysis. The trigger endpoint and exact action are not described in the available sources; exploitation requires a WordPress site running WooCommerce and the vulnerable plugin plus a valid low-privilege account.
Missing authorization in the VillaTheme Customer Coupons for WooCommerce plugin, affecting versions through 1.3.14, allows an authenticated low-privilege user such as a registered customer to perform a sensitive coupon-related action without the required permission check. The flaw is rated CVSS 4.3 (Medium) with limited integrity impact only-no confidentiality or availability impact-and no public exploit has been identified at time of analysis. The trigger endpoint and exact action are not described in the available sources; exploitation requires a WordPress site running WooCommerce and the vulnerable plugin plus a valid low-privilege account.