Threats tagged 'ghsa-3rmh-w7g6-4jgh'

The Welcart e-Commerce WordPress plugin versions prior to 2.12.6 contain an authorization flaw that allows any authenticated user with Author-level access or higher to manipulate SKU data of any product. This includes reading, modifying, creating, deleting, and re-ordering SKU information such as prices, confidential cost prices, and stock levels, even for products owned by other users.