Threats tagged 'ghsa-hqmj-vh3f-w9cw'

The Pixel Manager for WooCommerce plugin for WordPress has an information exposure vulnerability in all versions up to and including 1.49.2. The flaw exists in the ajax_pmw_get_product_ids() function, which lacks sufficient restrictions on product visibility. This allows unauthenticated attackers to access data from password protected, private, or draft products that should normally be inaccessible.