Threats tagged 'ghsa-h4r4-rrcj-mg5x'

The Security For WooCommerce WordPress plugin up to version 1.0.16 lacks proper authorization checks when resetting its settings. This flaw allows unauthenticated users to reset any section of the plugin's configuration to default values, potentially disabling critical security features such as custom login URLs, two-factor authentication, reCAPTCHA, password policies, and the firewall.