Threats tagged 'ghsa-4367-rh2q-m2rx'

The Welcart e-Commerce plugin for WordPress up to version 2.12.5 suffers from an Insecure Direct Object Reference (IDOR) vulnerability via the 'member[ID]' parameter. This flaw allows unauthenticated attackers to overwrite any shop-member account's email and password by specifying the member's numeric ID. Exploitation requires bypassing a wp_verify_nonce() check, but the nonce is publicly available on the New Enrollment Form, enabling full account takeover without any prior authentication or special configuration.