Threats tagged 'ghsa-wq3v-4v6v-9h3h'

The Security For WooCommerce WordPress plugin versions through 1.0.16 contain a vulnerability that allows unauthenticated users to forcibly log out any user, including administrators, by exploiting a lack of authorization checks when ending user sessions. Attackers can repeatedly send logout requests to keep targeted users logged out.