ShopMonitor.io – Automated Checkout & Form Monitoring < 1.2.0 - Unauthenticated Privilege Escalation via Account Takeover
criticalThe ShopMonitor.io – Automated Checkout & Form Monitoring plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to 1.2.0 (exclusive). This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for...
- CVSS:
- 9.8
- Affected:
- up to 1.2.0
- Fixed in:
- 1.2.0
- Disclosed:
- Aug 18, 2026