PT-2025-15846 · Onthegosystems · Woocommerce Multilingual & Multicurrency

·

CVE-2025-26888

·

Publicado

2025-04-09

·

Atualizado

2025-04-09

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: WooCommerce Multilingual & Multicurrency versions 5.3.8 and earlier
Description: The issue affects the OnTheGoSystems WooCommerce Multilingual & Multicurrency plugin, where a Missing Authorization vulnerability allows exploitation of incorrectly configured access control security levels.
Recommendations: For versions 5.3.8 and earlier, update to a version later than 5.3.8 to resolve the issue.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-26888

Produtos afetados

Woocommerce Multilingual & Multicurrency