CVE-2021-4353
Assigner: Wordfence
Published: 2023-10-20T06:35:25.115Z
State: PUBLISHED
affected: vendor: RightPress
product: WooCommerce Dynamic Pricing and Discounts
versions: version: *
status: affected
lessThan: 2.4.2
versionType: semver
defaultStatus: unaffected
descriptions: value: The WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthenticated settings export in versions up to, and including, 2.4.1. This is due to missing authorization on the export() function which makes makes it possible for unauthenticated attackers to export the plugin's settings.
problemTypes: descriptions: description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
baseScore: 5.3
baseSeverity: MEDIUM
credits: type: finder
value: Jerome Bruandet
timeline: time: 2021-08-31T00:00:00.000+00:00
value: Disclosed