Pixel Manager for WooCommerce Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the Pixel Manager for WooCommerce plugin, specifically in versions through 1.49.2. The issue arises in the ajax_pmw_get_product_ids() function, where inadequate restrictions allow unauthenticated users to access data from password-protected, private, or draft products.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive product information, including data from password-protected, private, or draft products.

Reproduction

To reproduce this vulnerability, send a POST request to the WordPress REST API endpoint '/pmw/v1/products/' without proper authentication. Include a 'product_ids' parameter with a comma-separated list of product IDs from password-protected, private, or draft products. The response will include the data from these products, demonstrating the information exposure.

Remediation

Users are advised to update the Pixel Manager for WooCommerce plugin to version 1.49.3 or later.