CVE-2024-11281: WooCommerce Point of Sale <= 6.1.0 - Insecure Direct Object Reference to Privilege Escalation via Arbitrary User Email Change
The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0. This is due to insufficient validation on the 'loggedinuserid' value when option values are empty and the ability for attackers to change the email of arbitrary user accounts. This makes it possible for unauthenticated attackers to change the email of arbitrary user accounts, including administrators, and reset their password to gain access to the account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11281?
CVE-2024-11281 has a medium severity rating due to the potential for privilege escalation.
How do I fix CVE-2024-11281?
To fix CVE-2024-11281, update the WooCommerce Point of Sale plugin to version 6.1.1 or later.
What versions are affected by CVE-2024-11281?
CVE-2024-11281 affects all versions of the WooCommerce Point of Sale plugin up to and including 6.1.0.
What kind of attack is enabled by CVE-2024-11281?
CVE-2024-11281 enables attackers to perform privilege escalation due to insufficient validation of the 'logged_in_user_id' value.
Who is affected by CVE-2024-11281?
Users of the WooCommerce Point of Sale plugin for WordPress are affected by CVE-2024-11281.