Vulnerability · Published May 2, 2024 · Assigned by Wordfence
CVE-2024-1677Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.6 - Improper Authorization
Medium 6.3
In plain English
A medium-severity missing authorization in Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce from ukrsolution. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Official description
The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to an improper capability check on 42 separate AJAX functions in all versions up to, and including, 3.4.6. This makes it possible for authenticated attackers, with subscriber access and above, to fully control the plugin which includes the ability to modify plugin settings and profiles, and create, edit, retrieve, and delete templates and barcodes.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ukrsolution | Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce | 0 – through 3.4.6 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L