WordPress Plugin Vulnerabilities
Stock Locations for WooCommerce < 2.8.7 - Missing Authorization
Description
The Stock Locations for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.
Affects Plugins
Fixed in 2.8.7 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
LVT-tholv2k
Verified
No
WPVDB ID
Timeline
Publicly Published
2025-06-07 (about 1 year ago)
Added
2025-06-10 (about 1 year ago)
Last Updated
2025-06-10 (about 1 year ago)
WPScan 