Mwb Hubspot For Woocommerce
Monthly
Broken authentication in MWB HubSpot for WooCommerce versions 1.6.7 and earlier allows subscriber-level authenticated WordPress users to bypass access controls and invoke functionality reserved for higher-privileged roles. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) places the primary impact on availability (High), with limited integrity impact and no confirmed confidentiality exposure - notable given the 'Information Disclosure' tag applied by Patchstack, which is not reconciled by the official scoring. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Broken authentication in MWB HubSpot for WooCommerce versions 1.6.7 and earlier allows subscriber-level authenticated WordPress users to bypass access controls and invoke functionality reserved for higher-privileged roles. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) places the primary impact on availability (High), with limited integrity impact and no confirmed confidentiality exposure - notable given the 'Information Disclosure' tag applied by Patchstack, which is not reconciled by the official scoring. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.