PT-2026-44035 · Bizswoop+1 · Sales Count Manager For Woocommerce+1
CVE-2022-41656
·
Published
2022-10-13
·
Updated
2026-05-27
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Bizswoop Account Manager for WooCommerce versions prior to 2.1.3
Description
An authorization bypass exists due to a missing capability check, allowing authenticated attackers with subscriber-level permissions or higher to exploit incorrectly configured access control security levels. This flaw enables the export of sensitive registered user data, including
user id, first name, and last name.Recommendations
Update to version 2.1.3 or later.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sales Count Manager For Woocommerce
Account-Manager-Woocommerce