Threats tagged 'ghsa-54rj-3mwp-c4c5'

PeproDev WooCommerce Receipt Uploader WordPress plugin versions up to and including 2.8.0 are vulnerable to an authorization bypass vulnerability. This flaw allows unauthenticated users to perform write operations due to missing authorization checks, specifically an IDOR (Insecure Direct Object Reference) issue. The vulnerability requires WooCommerce to be installed and can lead to unauthorized modification of data without authentication.