CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects WordPress.
CVE
CVE-2024-3869
Severity
MEDIUM
CVSS
4.3
EPSS
0.45%
WordPress
Original NVD Description
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'woocommerce_json_search_coupons' function . This makes it possible for attackers with subscriber level access to view coupon codes.
Related CVEs
Other vulnerabilities affecting the same vendor(s)