CVE-2023-4703

Name of the Vulnerable Software and Affected Versions The All in One B2B for WooCommerce WordPress plugin versions 1.0.0 through 1.0.3

Description The issue allows an unauthenticated attacker to update the details of any user due to improper validation of parameters when updating user details. This can lead to privilege escalation if the password of an Admin user is updated.

Recommendations For versions 1.0.0 through 1.0.3, update to a version that properly validates parameters when updating user details to prevent unauthorized user detail updates and potential privilege escalation.