Mediaticus Subaccounts for WooCommerce Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Mediaticus Subaccounts for WooCommerce plugin, affecting versions through 1.6.6. This vulnerability allows for authentication abuse, potentially leading to unauthorized actions being performed by users with lower privileges.

Impact

Exploitation of this vulnerability could allow users with lower privileges to gain unauthorized access or perform actions reserved for higher privileged users, such as administrative tasks.

Remediation

Users of the Mediaticus Subaccounts for WooCommerce plugin should update to version 1.6.7 or later. Patchstack users can enable auto-update for vulnerable plugins.