WordPress Plugin Vulnerabilities

EAN for WooCommerce < 4.9.3 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode

Description

The EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.9.2 via the the 'alg_wc_ean_product_meta' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with contributor-level access and above, to expose potentially sensitive post metadata.

Affects Plugins

Plugin icon
ean-for-woocommerce
Fixed in 4.9.3

References

CVE
CVE-2023-6897
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/17b20df5-4adf-47ce-bddf-2ec0b9499de8

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Francesco Carlucci
Verified
No
WPVDB ID
7f047499-4097-424c-a72a-83bd399081cf

Timeline

Publicly Published
2024-04-17 (about 2 years ago)
Added
2024-04-17 (about 2 years ago)
Last Updated
2024-04-17 (about 2 years ago)

Other

Published
Title
Published
2025-07-01
Title
Download Manager and Payment Form WordPress Plugin – WP SmartPay 1.1.0 - 2.7.13 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Published
2026-10-06
Title
LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Users Folder Deletion
Published
2026-10-02
Title
Issues and Series for Newspapers, Magazines, Publishers, Writers < 3.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference
Published
2026-09-21
Title
Custom Field Template < 2.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter