XforWooCommerce Product Filter Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the XforWooCommerce Product Filter for WooCommerce plugin, affecting versions through 9.1.2. This vulnerability allows low-privileged users to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining access to higher-level permissions. This could result in full control over the website, depending on the privileges obtained.

Remediation

Users are advised to update to a version of the XforWooCommerce Product Filter for WooCommerce plugin that is later than 9.1.2. For those using Patchstack, a mitigation rule has been issued to block attacks until an official patch can be safely applied.