BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net, CVE-2023-4924
- CVE, Research URL
- Home page URL
- Application
-
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
- Published on
- Oct 20, 2023
- Research Description
- The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to missing capability checks on the woobe_bulkoperations_delete function. This makes it possible for authenticated attackers, with subscriber access or higher, to delete products.
- Affected versions
-
max 1.1.4.
- Status
-
vulnerable