CVE-2023-47681: WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability
Published Jun 19, 2024
·Updated
Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0.
Affected Software
2 affected components
Quadlayers WooCommerce Checkout Manager<=7.3.0
WordPress WooCommerce Checkout Manager<=7.3.0
Remediation
Information
Update to 7.3.1 or a higher version.
Event History
Jun 19, 2024
CVE Published
via MITRE·11:07 AM
Data Sourced
via MITRE·11:07 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-47681?
CVE-2023-47681 is categorized as a critical missing authorization vulnerability.
2
How do I fix CVE-2023-47681?
To fix CVE-2023-47681, update QuadLayers WooCommerce Checkout Manager to version 7.3.1 or later.
3
Who is affected by CVE-2023-47681?
CVE-2023-47681 affects users of QuadLayers WooCommerce Checkout Manager up to version 7.3.0.
4
What actions can attackers perform due to CVE-2023-47681?
Attackers can exploit CVE-2023-47681 to bypass authorization controls and gain unauthorized access to sensitive functionalities.
5
Is there a patch available for CVE-2023-47681?
Yes, a patch for CVE-2023-47681 is included in version 7.3.1 of the QuadLayers WooCommerce Checkout Manager.