WP EasyCart Shopping Cart & eCommerce Store Missing Authorization Vulnerability

A vulnerability exists in the WP EasyCart Shopping Cart & eCommerce Store plugin for WordPress, in all versions through 5.7.8. The issue arises from a missing capability check on the webhook function, allowing unauthorized users to modify order statuses. This vulnerability could be exploited by unauthenticated attackers to change order statuses without proper authorization.

Impact

Exploitation of this vulnerability allows for unauthorized modification of order statuses, which could disrupt the order management process and potentially lead to financial discrepancies.

Remediation

Users can update to version 5.7.9 or a newer patched version to address this vulnerability.