Dotstore Fraud Prevention for WooCommerce Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in the Dotstore Fraud Prevention for WooCommerce plugin, affecting versions through 2.3.3. This vulnerability arises from incorrectly configured access control, allowing unauthorized users to delete arbitrary content from affected websites, such as posts, pages, or media.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content from the WordPress site, including posts, pages, or media files.

Remediation

Users are advised to update the Dotstore Fraud Prevention for WooCommerce plugin to the latest version. If unable to update, consult with your hosting provider or web developer for assistance.