Vanquish WooCommerce Bulk Product Editor Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Vanquish WooCommerce Bulk Product Editor plugin, specifically in versions through 3.0. This vulnerability arises from missing authorization checks, allowing users with lower privileges to perform actions reserved for higher-level users.

Impact

Exploitation of this vulnerability could enable unauthorized users to access or modify data or perform actions with elevated privileges, potentially leading to further exploitation or damage.

Remediation

Users are advised to update to a version of the WooCommerce Bulk Product Editor plugin that is greater than 3.0. For those using WordPress, Patchstack offers a mitigation service that can be activated to protect against this vulnerability until an official patch is applied.