Legion Hunter

The plugin is subject to unauthorized access and data loss because the `save option()` function lacks a capability check. This flaw allows unauthenticated attackers to export or reset the plugin settings.

The software allows unauthorized modification of data because the `vw writer blog reset all settings()` function lacks a proper capability check. Authenticated users with Subscriber-level access or higher can exploit this to reset all theme customizer settings to their default values.

Authenticated users with Subscriber-level access and above can perform unauthorized post meta modification. This is caused by a missing capability check on the 'iepa use gt editor' AJAX action, allowing attackers to update or delete arbitrary post meta entries using the `iepa builder` meta key.

Unauthorized modification of data is possible due to a missing capability check and missing nonce verification in the `disconnect callback()` function. This function is registered to the 'wp ajax wcefr-disconnect' API endpoint and unconditionally calls `delete option('wcefr-agt')`, which removes the Reviso Agreement Grant Token used to authenticate API calls. Authenticated attackers with Subscriber-level access or higher can exploit this to delete the stored token and break the connection between WooCommerce and the Reviso service.

The plugin is susceptible to unauthorized data disclosure and modification because all REST API endpoints are registered with `permission callback => ' return true'`, which bypasses necessary authorization. This allows unauthenticated attackers to read and modify core settings, stockbar configurations, and banner records. Additionally, attackers can toggle feature flags, change the active banner, and upload background-image files using the `wp handle upload()` function without providing a nonce or passing a capability check.

Unauthenticated attackers can modify or delete Stripe payment credentials. This occurs because the `wpf stripe callback success()` and `wpf stripe disconnect()` functions, which are hooked to `admin init` on the `admin-post.php` endpoint, lack capability checks and nonce verification. A nonce is a unique token used to prevent replay attacks by ensuring a request is intentional and authentic. This flaw allows an attacker to overwrite Stripe API credentials to redirect payments to their own account or completely disconnect the Stripe integration.

The Udimi Tools plugin for WordPress allows authenticated users with Subscriber-level access and above to perform unauthorized data modifications. This is caused by missing capability checks in the `ajax disconnect()` and `ajax connect()` functions. An attacker can use `ajax disconnect()` to delete six configuration options, such as the API key, connected Udimi user email, and tracking-script payload, which disconnects the site from the Udimi account. Additionally, the `ajax connect()` function allows attackers to overwrite these configuration options with an attacker-supplied API key.

Unauthorized modification of data is possible due to a missing capability check and missing nonce validation in the `fense bpvt save settings()` function. The callback is registered to both `wp ajax *` and `wp ajax nopriv *` hooks and unconditionally calls `delete option()` on four plugin options and `delete transient()` on three transients related to the plugin's API key cache and settings. This allows unauthenticated attackers to delete plugin options and transients, resetting the API key and data cache, which forces the plugin to refetch state.

Authenticated users with Subscriber-level access and above can perform unauthorized cache deletion. This is caused by a missing capability check on the `thrivedesk clear cache` AJAX action.

The plugin is susceptible to unauthorized data modification because the `gwaiwebu gravitywrite disconnect handler()` function lacks a proper capability check. Authenticated users with Subscriber-level permissions or higher can exploit this by using the 'gwaiwebu gravitywrite disconnect' AJAX action to disconnect the plugin from GravityWrite.

Cross-Site Request Forgery (CSRF) occurs due to missing nonce verification in the `reset credential()` function, which handles the `wp ajax goodmeet reset google meet credential` AJAX action. Although the function checks for the `manage options` capability, the lack of a nonce allows unauthenticated attackers to trick a site administrator into clicking a malicious link. This action resets and deletes the stored Google Meet API credentials `goodmeet google credentials` and OAuth tokens `goodmeet google token`, resulting in the disablement of the Google Meet integration on the site.

The plugin is subject to unauthorized access because the `handle export table()` function is registered on the WordPress 'init' hook without a capability check. This hook executes for all requests, including those from unauthenticated users. An attacker can download a CSV file containing sensitive WooCommerce donation data—such as order dates, order IDs, charitable donation amounts, and admin-only order edit URLs—by accessing any page with the `tot export table` GET parameter set to a numeric value between 0 and 3.

Webba Booking contains a missing authorization flaw resulting from incorrectly configured access control security levels. This occurs due to a missing capability check within a function, allowing unauthenticated attackers to perform unauthorized actions.

An authorization flaw exists due to a missing capability check in a function, allowing authenticated users with subscriber-level access and above to perform unauthorized actions by exploiting incorrectly configured access control security levels.

A missing authorization issue in Webful Creations RepairBuddy allows for the exploitation of incorrectly configured access control security levels.

Missing authorization allows the exploitation of incorrectly configured access control security levels.

A missing authorization issue in the plugin allows for the exploitation of incorrectly configured access control security levels, resulting in broken access control.

A missing authorization issue exists in the Autoship Cloud for WooCommerce Subscription Products plugin, which allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify the identity or permissions of a user before granting access to restricted resources.

A missing capability check in the `actions()` function allows users with subscriber privileges or higher to unauthorizedly modify or delete the plugin license key.

Name of the Vulnerable Software and Affected Versions Eniture technology LTL Freight Quotes – Worldwide Express Edition versions through 5.2.1 Description A missing authorization issue exists in Eniture technology LTL Freight Quotes – Worldwide Express Edition due to incorrectly configured access control security levels. Recommendations Update to a version later than 5.2.1