Vulnerabilities and security researches forjvm-woocommerce-wishlist jvm-woocommerce-wishlist

Jun 07, 2024

CVE, Research URL: 44328ad4a73527e247087ea8c83a111a265d4b16
Home page URL: Security reports for Wishlist for WooCommerce
Application: Wishlist for WooCommerce
Date: Aug 12, 2019
Research Description: JVM WooCommerce Wishlist [jvm-woocommerce-wishlist] < 1.2.7 JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference The JVM WooCommerce Wishlist plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'user_id' parameter in versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to bypass authorization protocols and access otherwise restricted system resources.
Affected versions: max 1.2.7.
Status: vulnerable