Product Recommendation Quiz for eCommerce <= 2.1.0 - Missing Authorization in prq_set_token
mediumThe Product Recommendation Quiz for eCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the prq_set_token function in versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to modify plugin settings via a request to t...
- CVSS:
- 6.5
- Affected:
- up to 2.1.0
- Fixed in:
- 2.1.2
- Disclosed:
- Oct 25, 2023