Product Expiry for WooCommerce, CVE-2024-0201

CVE, Research URL: CVE-2024-0201
Home page URL: Security reports for Product Expiry for WooCommerce
Application: Product Expiry for WooCommerce
Published on: Jan 03, 2024
Research Description: The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_settings' function in versions up to, and including, 2.5. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings.
Affected versions: max 2.6.
Status: vulnerable