ViaBill for WooCommerce Missing Authorization Vulnerability Allowing Access Control Exploitation

A missing authorization vulnerability has been identified in the ViaBill – WooCommerce plugin, specifically in versions through 1.1.53. This vulnerability arises from incorrectly configured access control security levels, allowing unauthorized changes to settings.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in settings, disrupting the intended configuration and potentially allowing further exploitation or misuse of the site.

Remediation

Users are advised to update the ViaBill – WooCommerce plugin to the latest version. If an update is not possible, consult with your hosting provider or web developer for assistance.