Centangle Direct Checkout for WooCommerce Lite Missing Authorization Vulnerability

Vulnerability

A broken access control vulnerability has been identified in the Centangle Direct Checkout for WooCommerce Lite plugin, affecting versions through 1.0.3. This vulnerability allows users to access functionalities that are not properly restricted by access control mechanisms.

Impact

Exploitation of this vulnerability could lead to unauthorized users performing actions that require higher privileges, due to the lack of proper authorization checks in the affected plugin.

Added: Jun 6, 2025, 2:54 PM
Updated: Jun 6, 2025, 2:54 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
7.4
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.