CoCart – Decoupling WooCommerce Made Easy, 8dc47e60294b1857b3677ea4e6141b753f4b4e79
- CVE, Research URL
- Application
- Published on
- Nov 07, 2023
- Research Description
- CoCart – Decoupling Made Easy for WooCommerce [cart-rest-api-for-woocommerce] < 3.12.0 WordPress CoCart – Headless ecommerce Plugin <= 3.9.0 is vulnerable to Broken Access Control No patched version is available. Mika discovered and reported this Broken Access Control vulnerability in WordPress CoCart – Headless ecommerce Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
- Affected versions
-
Min -, max 3.12.0.
- Status
-
vulnerable