Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password
criticalThe Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, includ...
- CVSS:
- 9.8
- Affected:
- up to 1.1.2
- Fixed in:
- 1.1.3
- Disclosed:
- Oct 2, 2025