Product Catalog Mode For WooCommerce, 4455186991c9d54dbcfe314c2afb2c8e4e15795a

CVE, Research URL: 4455186991c9d54dbcfe314c2afb2c8e4e15795a
Home page URL: Security reports for Product Catalog Mode For WooCommerce
Application: Product Catalog Mode For WooCommerce
Published on: Nov 03, 2023
Research Description: CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce [woocommerce-catalog-enquiry] < 5.0.3 Product Catalog Mode For Woocommerce <= 5.0.2 - Missing Authorization The Product Catalog Mode For Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the dismiss_mvx_catalog_servive_notice function in all versions up to 5.0.3 (exclusive). This makes it possible for authenticated attackers, with subscriber access and above, to dismiss admin notifications.
Affected versions: max 5.0.3.
Status: vulnerable