PT-2026-50851 · Unknown · 2Download Connector For 2Dl Hosted Checkout
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
2Download Connector for 2DL Hosted Checkout versions prior to 0.1.6
Description
The plugin fails to properly verify user authorization before performing specific actions. This allows unauthenticated attackers to access arbitrary customer subscription data, including subscription status, product names, order IDs, purchase dates, and expiry dates.
Recommendations
Update to a version later than 0.1.5.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
2Download Connector For 2Dl Hosted Checkout