YITH WooCommerce Product Add-Ons Missing Authorization Vulnerability Allowing Broken Access Control

A missing authorization vulnerability has been identified in the YITH WooCommerce Product Add-Ons plugin, affecting versions through 4.2.0. This vulnerability arises from incorrectly configured access control, which can be exploited to perform actions without the necessary permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized users being able to perform actions that require higher privileges, due to the lack of proper authorization checks.

Remediation

Users of the YITH WooCommerce Product Add-Ons plugin should update to version 4.2.1 or later. Patchstack users can enable auto-update for vulnerable plugins.