PT-2023-12462
CVE-2021-4353
·
تاريخ النشر
2023-10-19
·
تاريخ التحديث
2023-10-26
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WooCommerce Dynamic Pricing and Discounts plugin for WordPress versions up to, and including, 2.4.1
Description
The issue arises from missing authorization on the
export() function, allowing unauthenticated attackers to export the plugin's settings. This affects the WooCommerce Dynamic Pricing and Discounts plugin for WordPress.Recommendations
For versions up to, and including, 2.4.1, update to a version higher than 2.4.1 to resolve the issue.
As a temporary workaround, consider disabling the
export() function until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾