WowStore ProductX Gutenberg WooCommerce Blocks Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the WowStore ProductX Gutenberg WooCommerce Blocks plugin, affecting versions through 2.7.8. This vulnerability arises from incorrectly configured access control, which can be exploited to perform actions that require higher privileges.

Impact

Exploitation of this vulnerability allows an unprivileged user to execute actions that require higher privileges, due to the missing authorization checks.

Remediation

Users of the WowStore ProductX Gutenberg WooCommerce Blocks plugin should update to version 3.0.0 or later. Patchstack users can enable auto-update for vulnerable plugins.