Description

WordPress Plugin Share, Print and PDF Products for WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently take over the website and its database. WordPress Plugin Share, Print and PDF Products for WooCommerce version 2.7.2 is vulnerable; prior versions are also affected.

Remediation

Update to plugin version 2.8.0 or latest

References

https://blog.nintechnet.com/16-woocommerce-product-add-ons-plugins-fixed-vulnerabilities/

https://xforwoocommerce.com/blog/change-log/xforwoocommerce-1-7-0/

Related Vulnerabilities

WordPress Plugin Smart Forms-when you need more than just a contact form Security Bypass (2.6.70)

Oracle Database Server CVE-2007-0274 Vulnerability (CVE-2007-0274)

Apache HTTP Server Resource Management Errors Vulnerability (CVE-2016-1546)

WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Arbitrary File Upload (2.3.10)

WordPress Plugin FireStorm Professional Real Estate 'id' Parameter SQL Injection (2.06.03)

Severity

High

Classification

CWE-264 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass