WordPress Hide Shipping Method For WooCommerce Broken Access Control Vulnerability
Vulnerability
A missing authorization vulnerability has been identified in the WordPress plugin 'Hide Shipping Method For WooCommerce', affecting versions through 1.5.1. This vulnerability allows unprivileged users to perform actions that require higher privileges, due to a lack of proper authorization checks.
Impact
Exploitation of this vulnerability could enable an unprivileged user to execute actions that require higher privileges, potentially leading to unauthorized changes or access within the WooCommerce shipping settings.
Remediation
Users of the 'Hide Shipping Method For WooCommerce' plugin should update to version 1.5.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.