Description
WordPress Plugin WooCommerce Stock Manager is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change a number of product details including the price, stock status, and the weight of the product. WordPress Plugin WooCommerce Stock Manager version 1.0.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.8 or latest
References
Related Vulnerabilities
WordPress Plugin The Events Calendar Cross-Site Scripting (4.8.1)
MySQL CVE-2023-21881 Vulnerability (CVE-2023-21881)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20405)
WordPress Plugin Secure File Manager Remote Code Execution (2.8.1)
WordPress Plugin AVH Extended Categories Widgets Unspecified Vulnerability (4.0.2)