Simpler Checkout 0.7.0 - 1.1.13 - Authentication Bypass
criticalThe Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.13. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwc_woocommerce_order_created() function. This makes it possible for unauthenticated att...
- CVSS:
- 9.8
- Affected:
- 0.7.0 – 1.1.13
- Fixed in:
- 1.2.0
- Disclosed:
- Aug 22, 2025