Speedcomp Linet ERP-Woocommerce Integration Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the Speedcomp Linet ERP-Woocommerce Integration plugin, affecting versions through 3.5.7. This vulnerability allows exploitation of improperly configured access control security levels, potentially leading to unauthorized actions being performed by users with higher privileges.

Impact

Exploitation of this vulnerability could allow a malicious actor to perform unauthorized actions on behalf of users with higher privileges, due to the broken access control.

Remediation

Users of the Speedcomp Linet ERP-Woocommerce Integration plugin should update to version 3.5.8 or later to address this vulnerability.