Addonify Floating Cart for WooCommerce Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the Addonify Floating Cart for WooCommerce plugin, specifically in versions through 1.2.17. This vulnerability arises from incorrectly configured access control, allowing unprivileged users to perform actions that require higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functionalities or data within the WooCommerce environment.

Remediation

Users are advised to update to a version of the Addonify Floating Cart for WooCommerce plugin that is later than 1.2.17. For those using Patchstack, a mitigation rule is available to block attacks until an official patch can be safely applied.