Download Monitor Integration For Woocommerce
Monthly
An authenticated attacker with low privileges can bypass access controls in the WordPress plugin Download Monitor integration for WooCommerce versions up to 1.0.3, leading to unauthorized access to limited confidential information. This moderate-severity missing authorization flaw (CWE-862) requires a valid logged-in account and does not allow data modification or service disruption; no public exploit code has been identified at the time of analysis. The plugin must be installed alongside WooCommerce, and only sites running this specific integration are affected.
An authenticated attacker with low privileges can bypass access controls in the WordPress plugin Download Monitor integration for WooCommerce versions up to 1.0.3, leading to unauthorized access to limited confidential information. This moderate-severity missing authorization flaw (CWE-862) requires a valid logged-in account and does not allow data modification or service disruption; no public exploit code has been identified at the time of analysis. The plugin must be installed alongside WooCommerce, and only sites running this specific integration are affected.