Addonify Compare Products for WooCommerce Missing Authorization Vulnerability Allowing Settings Change
Vulnerability
A missing authorization vulnerability has been identified in the Addonify Compare Products for WooCommerce plugin, specifically in versions through 1.1.17. This vulnerability arises from incorrectly configured access control, allowing unauthorized users to exploit the issue and change settings.
Impact
Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially allowing for further exploitation or manipulation of the WooCommerce store.
Remediation
Users of the Addonify Compare Products for WooCommerce plugin should update to version 1.1.18 or later. Patchstack users can enable auto-update for vulnerable plugins.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.