WordPress Barcode Generator for WooCommerce Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the WordPress Barcode Generator for WooCommerce plugin, specifically in versions through 2.0.4. This vulnerability allows for arbitrary content deletion by exploiting incorrectly configured access control security levels. As a result, a malicious actor could potentially delete various types of content from the website, such as images, posts, or pages.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content from the affected WordPress site, including posts, pages, or media files.

Remediation

Users of the WordPress Barcode Generator for WooCommerce plugin are advised to update to version 2.0.5 or later. Patchstack users can enable auto-update for vulnerable plugins.