WordPress Taxonomy/Term and Role Based Discounts for WooCommerce Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the WordPress plugin Taxonomy/Term and Role Based Discounts for WooCommerce, affecting versions through 5.1. This vulnerability allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized changes in settings.

Impact

Exploitation of this vulnerability could allow a malicious actor to perform unauthorized actions by leveraging the privileges of users with higher access rights.

Remediation

Users of the Taxonomy/Term and Role Based Discounts for WooCommerce plugin should update to version 5.2 or later to address this vulnerability.