Convertful – Your Ultimate On-Site Conversion Tool <= 2.5 - Missing Authorization via add_woo_coupon
mediumThe Convertful – Your Ultimate On-Site Conversion Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'add_woo_coupon' REST function in versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to generate coupons for arbit...
- CVSS:
- 5.3
- Affected:
- up to 2.5
- Fixed in:
- 2.6
- Disclosed:
- Oct 24, 2023