Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin YITH Advanced Refund System for WooCommerce Security Bypass - CVE-2019-16251 - Vulnerability Database
WP Plugin Yith Advanced Refund System For Woocommerce

WordPress Plugin YITH Advanced Refund System for WooCommerce Security Bypass - CVE-2019-16251

Medium
Reference: CVE-2019-16251
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-16251
Title: WordPress Plugin YITH Advanced Refund System for WooCommerce Security Bypass
Overview:

WordPress Plugin YITH Advanced Refund System for WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin options. WordPress Plugin YITH Advanced Refund System for WooCommerce version 1.0.10 is vulnerable prior versions may also be affected.