Ni WooCommerce Cost Of Goods Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Ni WooCommerce Cost Of Goods plugin, affecting versions through 3.2.8. This vulnerability arises from missing authorization checks, which can be exploited by users with lower privileges to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could allow users with subscriber privileges to access or modify data or perform actions that should be restricted to users with higher privileges.

Remediation

Users of the Ni WooCommerce Cost Of Goods plugin should update to version 3.2.9 or later to address this vulnerability.