Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin Add Product Tabs for WooCommerce Security Bypass (1.4.2) - Vulnerability Database

WordPress Plugin Add Product Tabs for WooCommerce Security Bypass (1.4.2)

Description

WordPress Plugin Add Product Tabs for WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently take over the website and its database. WordPress Plugin Add Product Tabs for WooCommerce version 1.4.2 is vulnerable; prior versions are also affected.

Remediation

Update to plugin version 1.5.0 or latest

References

https://blog.nintechnet.com/16-woocommerce-product-add-ons-plugins-fixed-vulnerabilities/
https://xforwoocommerce.com/blog/change-log/xforwoocommerce-1-7-0/

Related Vulnerabilities

WordPress Plugin Starfish Review Generation & Marketing for WordPress Security Bypass (2.0.0) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin OneLogin SAML SSO Security Bypass (2.2.0) High
Common tags: Missing Update Authentication Bypass
Joomla! Core 3.x.x Security Bypass (3.8.0 - 3.9.3) High
Common tags: Missing Update Authentication Bypass
Joomla! Core 3.x.x Security Bypass (3.2.0 - 3.9.4) High
Common tags: Missing Update Authentication Bypass
Joomla! Core 3.x.x Security Bypass (3.8.13 - 3.9.6) High
Common tags: Missing Update Authentication Bypass

Severity

High

Classification

CWE-264
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update
Authentication Bypass