Threats tagged 'ghsa-25qp-vg38-c324'

The Import Export For WooCommerce plugin for WordPress contains a vulnerability in versions up to and including 1.6.2 that allows authenticated users with Subscriber-level access or higher to modify plugin settings without proper authorization. This is due to a missing capability check in the update_setting() function.