PT-2025-54373
CVE-2025-49356
·
Published
2025-12-31
·
Updated
2025-12-31
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Orders Chat for WooCommerce versions through 1.2.0
Description
A missing authorization flaw exists in Mykola Lukin Orders Chat for WooCommerce, stemming from incorrectly configured access control security levels. This allows for exploitation of the system.
Recommendations
Update Orders Chat for WooCommerce to a version later than 1.2.0.
Found an issue in the description? Have something to add? Feel free to write us 👾