Description
WordPress Plugin WooCommerce Admin is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently leak analytics reports. WordPress Plugin WooCommerce Admin version 2.6.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin versions 1.0.4,1.1.4,1.2.5,1.3.3,1.4.1,1.5.1,1.6.4,1.7.4,1.8.4,1.9.1,2.0.4,2.1.6,2.2.7,2.3.2,2.4.5,2.5.2,2.6.4 or latest
References
Related Vulnerabilities
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1507)
WordPress Plugin HDInvoice-Create Invoices Arbitrary File Upload (0.1)
SharePoint Improper Certificate Validation Vulnerability (CVE-2019-1006)
WordPress Plugin WPML Translation Management PHP Object Injection (2.4.1)