PT-2025-53250 · WordPress · Wp Swings Membership For Woocommerce
CVE-2025-67909
·
Publicado
2025-12-24
·
Atualizado
2025-12-29
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
WP Swings Membership For WooCommerce versions through 3.0.3
Description
An authorization bypass exists due to incorrectly configured access control security levels. This allows bypassing authorization through a user-controlled key. The issue affects Membership For WooCommerce.
Recommendations
Update WP Swings Membership For WooCommerce to a version later than 3.0.3.
Correção
IDOR
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wp Swings Membership For Woocommerce