Conditional Checkout Fields & Edit Checkout Fields for WooCommerce <= 1.2.3 - Missing Authorization
mediumThe Conditional Checkout Fields & Edit Checkout Fields for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability check in versions up to, and including, 1.2.3. This makes it possible for unauthenticated attackers to perform unauthorized actions.
- CVSS:
- 5.3
- Affected:
- up to 1.2.3
- Fixed in:
- 1.2.4
- Disclosed:
- Feb 24, 2023