WordPress Registration and Login with Mobile Phone Number for WooCommerce Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress plugin 'Registration & Login with Mobile Phone Number for WooCommerce', affecting versions through 1.3.1. This vulnerability arises from missing authorization checks, allowing unauthorized users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could allow unauthorized users to access or modify data or perform actions with elevated privileges, bypassing normal access controls.

Remediation

Users of the 'Registration & Login with Mobile Phone Number for WooCommerce' plugin should update to version 1.3.2 or later. Patchstack users can enable auto-update for vulnerable plugins.