Threats tagged 'ghsa-h254-x8fv-6853'

The Fraud Prevention For WooCommerce and EDD WordPress plugin versions before 2.3.6 lack proper authorization checks when adding customer details to the fraud blacklist. This flaw allows users with the Subscriber role and above to add arbitrary legitimate customers to the fraud blacklist, potentially blocking them from placing orders.