8.8

CVE-2023-47179

WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update

Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.4.6.
Mögliche Gegenmaßnahme
Delivery Date Time & Pickup for WooCommerce: Update to version 2.4.7, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Byconsole ≫ Wooodt Lite SwPlatformwordpress Version < 2.4.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Delivery Date Time & Pickup for WooCommerce
Version *-2.4.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.93% 0.56
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
audit@patchstack.com 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://patchstack.com/database/Wordpress/Plugin/byconsole-woo-order-delivery-time/vulnerability/wordpress-wooodt-lite-plugin-2-4-6-arbitrary-site-option-update-vulnerability?_s_id=cve
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/9939f297-e3ca-4d7d-9acd-c416ee2014c9
Third Party Advisory