Putler WooCommerce Connector Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Putler Connector for WooCommerce, affecting versions through 2.12.0. This vulnerability allows unauthenticated users to perform actions that require higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functionalities or data within the WooCommerce store.

Remediation

Users of the Putler Connector for WooCommerce should update to version 2.13.0 or later. Patchstack users can enable auto-update for vulnerable plugins.