WordPress Plugin Vulnerabilities

Woocommerce Store Toolkit < 1.5.8 - Privilege Escalation

Description

The Store Toolkit for WooCommerce WordPress plugin was affected by a Privilege Escalation security vulnerability.

Affects Plugins

Plugin icon
woocommerce-store-toolkit
Fixed in 1.5.8

References

CVE
CVE-2016-10923

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
baa7a6df-c59c-476b-ac63-1f2589b24580

Timeline

Publicly Published
2016-02-10 (about 10 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-03-31
Title
WP RealEstate < 1.6.27 - Unauthenticated Privilege Escalation via 'process_register'
Published
2026-03-21
Title
Import and export users and customers < 2.0 - Privilege Escalation to Administrator via save_extra_user_profile_fields
Published
2023-05-11
Title
Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation
Published
2025-07-28
Title
SureDash < 1.1.0 - Subscriber+ Privilege Escalation
Published
2025-07-22
Title
Social Streams <= 1.2.1 - Subscriber+ Privilege Escalation