PT-2026-99775 · WordPress · Blacklist Manager For Woocommerce
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Blacklist Manager for WooCommerce WordPress plugin versions 1.3.0 through 2.3.1
Description
The plugin fails to enforce user blocking across all authentication paths. This allows users who have been blocked by the site owner to continue authenticating and accessing the site with their account privileges, as the block is neither enforced nor recorded during these specific authentication processes.
Recommendations
Update Blacklist Manager for WooCommerce WordPress plugin to a version later than 2.3.1.
Exploit
Fix
Authentication Bypass Using an Alternate Path or Channel
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Blacklist Manager For Woocommerce