WordPress Plugin Vulnerabilities
WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation
Description
By crafting a request with all of the necessary parameters, attackers could generate and send themselves valid gift certificates for a victim’s WooCommerce store. This vulnerability has been patched as of WooCommerce Smart Coupons 4.6.5.
Affects Plugins
Fixed in 4.6.5 References
Miscellaneous
Original Researcher
Aaron Averbuch
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-03-04 (about 6 years ago)
Added
2020-03-04 (about 6 years ago)
Last Updated
2020-03-05 (about 6 years ago)
WPScan 