Threats tagged 'ghsa-fw3h-f59m-m57g'

The Security For WooCommerce WordPress plugin through version 1.0.16 has a vulnerability where it does not verify if the requester is authorized before regenerating secret keys and salts in the site's configuration file. This flaw allows unauthenticated users to log out every user on the site. Additionally, on servers that cannot reach the WordPress.org API, this can corrupt the configuration file and take the entire site offline.