WordPress Plugin Vulnerabilities

Products & Order Export for WooCommerce < 2.0.9 - Missing Authorization

Description

The plugin is vulnerable to unauthorized access due to missing capability checks on the alg_wc_export_admin_product_preview and alg_wc_export_admin_product_change_date_filter functions in all versions up to, and including, 2.0.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to export product features and change date filters.

Affects Plugins

Fixed in 2.0.9

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Timeline

Publicly Published
2024-01-10 (about 2 years ago)
Added
2024-03-13 (about 2 years ago)
Last Updated
2024-03-13 (about 2 years ago)

Other