WordPress Plugin Vulnerabilities

Custom Thank You Page Customize For WooCommerce by Binary Carpenter < 1.4.14 - Missing Authorization

Description

The Custom Thank You Page Customize For WooCommerce by Binary Carpenter plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the activation_callback() function in all versions up to, and including, 1.4.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the activation license.

Affects Plugins

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Abdi Pranata
Verified
No

Timeline

Publicly Published
2024-04-15 (about 2 years ago)
Added
2024-04-23 (about 2 years ago)
Last Updated
2024-04-23 (about 2 years ago)

Other