TaxCloud for WooCommerce <= 8.3.8 - Missing Authorization
mediumThe TaxCloud for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 8.3.8. This makes it possible for unauthenticated attackers to perform an unauthorized action.
- CVSS:
- 5.3
- Affected:
- up to 8.3.8
- Fixed in:
- 8.4.0
- Disclosed:
- Jan 21, 2026