WordPress Plugin Vulnerabilities

WANotifier < 2.7.13 - Missing Authorization

Description

The Notifier – Send Notifications from Woocommerce, Form Plugins and More! plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.7.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

Affects Plugins

Fixed in 2.7.13

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
domiee13
Verified
No

Timeline

Publicly Published
2025-06-19 (about 1 year ago)
Added
2025-06-25 (about 1 year ago)
Last Updated
2026-03-17 (about 6 months ago)

Other