PT-2025-47318 · WordPress+2 · Pixel Manager For Woocommerce+2
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress versions prior to 1.49.3
Description
The software contains a flaw that allows unauthenticated attackers to extract data from password protected, private, or draft products that they should not have access to. This is due to insufficient restrictions on which products can be included in the
ajax pmw get product ids() function.Recommendations
Update to version 1.49.3 or later.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Ads
Pixel Manager For Woocommerce
Tiktok