WebToffee Smart Coupons for WooCommerce Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the WebToffee Smart Coupons for WooCommerce plugin, affecting versions prior to 2.3.0. This vulnerability arises from missing authorization checks, which can be exploited by unprivileged users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability allows unprivileged users to execute actions that require higher privileges, due to the absence of proper authorization checks.

Remediation

Users of the WebToffee Smart Coupons for WooCommerce plugin should update to version 2.3.0 or later. Patchstack users can enable auto-update for vulnerable plugins.