Product Catalog Mode For WooCommerce, b308b1976fbd8c17995ad5f6339f0f0a06f57ab7

CVE, Research URL: b308b1976fbd8c17995ad5f6339f0f0a06f57ab7
Home page URL: Security reports for Product Catalog Mode For WooCommerce
Application: Product Catalog Mode For WooCommerce
Published on: Nov 03, 2023
Research Description: CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce [woocommerce-catalog-enquiry] < 5.0.3 Product Catalog Enquiry <= 5.0.2 - Missing Authorization The Product Catalog Mode For Woocommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to an improper capability check on the catalog_rest_routes_react_module REST endpoints in all versions up to 5.0.3 (exclusive). This makes it possible for unauthenticated attackers to view data from admin tabs and save enquiries.
Affected versions: max 5.0.3.
Status: vulnerable