Description

WordPress Plugin WooCommerce-Store Toolkit is prone to a privilege escalation vulnerability. Exploiting this issue may allow attackers to bypass the expected capabilities check and perform otherwise restricted actions such as delete nearly all content of an affected website. WordPress Plugin WooCommerce-Store Toolkit version 1.5.6 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.5.7 or latest

References

http://pvagenas.com/vulnerabilities/woocommerce-store-toolkit-privilege-escalation/

https://www.exploit-db.com/exploits/39421/

http://seclists.org/bugtraq/2016/Feb/57

https://packetstormsecurity.com/files/135679/WordPress-WooCommerce-1.5.5-Privilege-Escalation.html

https://wordpress.org/plugins/woocommerce-store-toolkit/changelog/

Related Vulnerabilities

LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000659)

Apache Tomcat Resource Management Errors Vulnerability (CVE-2014-0230)

Apache Tomcat Improperly Implemented Security Check for Standard Vulnerability (CVE-2017-15706)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.1.1)

Squid Reachable Assertion Vulnerability (CVE-2023-49286)

Severity

High

Classification

CWE-264 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Privilege Escalation