Product Stock Manager & Notifier for WooCommerce, bb22b85cb15d0cd5e7c9bacbc870cccb7371b0c5
- CVE, Research URL
- Published on
- Jul 10, 2023
- Research Description
- Product Stock Waitlist Manager for WooCommerce – Back In Stock Notifier, Sync, bulk edit [woocommerce-product-stock-alert] < 2.0.2 WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API The WooCommerce Product Stock Alert plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stock_alert_rest_routes_react_module action in versions up to, and including, 2.0.1. This makes it possible for authenticated attackers with subscriber-level access to use this endpoint intended for administrators.
- Affected versions
-
max 2.0.2.
- Status
-
vulnerable