Products Restricted Users For Woocommerce
Monthly
Missing authorization in the Codection 'Products Restricted Users for WooCommerce' WordPress plugin, version 0.7 and earlier, allows unauthenticated remote attackers to bypass the plugin's access-control logic and alter which products are restricted. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no credentials or user interaction are required against a default installation, although the impact is limited to low integrity (C:N/I:L/A:N) on plugin-controlled restriction state rather than data disclosure or denial of service. No public exploit code was identified at time of analysis, and the plugin has a narrow deployment footprint, so this is a moderate rather than high priority finding.
Missing authorization in the Codection 'Products Restricted Users for WooCommerce' WordPress plugin, version 0.7 and earlier, allows unauthenticated remote attackers to bypass the plugin's access-control logic and alter which products are restricted. Per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no credentials or user interaction are required against a default installation, although the impact is limited to low integrity (C:N/I:L/A:N) on plugin-controlled restriction state rather than data disclosure or denial of service. No public exploit code was identified at time of analysis, and the plugin has a narrow deployment footprint, so this is a moderate rather than high priority finding.