Description
WordPress Plugin Discount Rules for WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently view all available coupons on a site and activate, duplicate, or delete discount rules. WordPress Plugin Discount Rules for WooCommerce version 2.2.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.2.1 or latest
References
Related Vulnerabilities
Lighttpd Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4559)
WordPress Plugin Members Import Cross-Site Request Forgery (1.3)
WordPress Plugin Download Manager PHAR Deserialization (3.2.49)
WordPress Plugin Migration, Backup, Staging-WPvivid SQL Injection (0.9.52)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4300)