CyberRota Analysis
AI-GeneratedWebkul Bagisto versions up to 2.4.4 are vulnerable due to improper access controls in the Customer Item Deletion Endpoint, allowing remote exploitation. Although the severity is rated low, organizations using affected versions should prioritize remediation, as publicly available exploits could be leveraged. Users should stay informed on vendor updates, as some issues are already being addressed in upcoming releases.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor confirms: "The reported issues were already identified through our internal security assessment process prior to this notification and are being handled through our established internal security and development lifecycle. Some of these items have already been addressed, while the remaining items are planned for resolution in upcoming product releases."