Eniture Technology Standard Box Sizes for WooCommerce Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Eniture Technology Standard Box Sizes plugin for WooCommerce, affecting versions through 1.6.13. This vulnerability allows unauthorized users to perform actions that require higher privileges, due to the absence of necessary authorization checks.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to functions or data that should be restricted, potentially allowing them to perform actions on behalf of a user with higher privileges.

Remediation

Users of the Eniture Technology Standard Box Sizes for WooCommerce plugin should update to version 1.6.14 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.