WPC Shop as a Customer for WooCommerce vulnerabilities
3 known vulnerabilities in WPC Shop as a Customer for WooCommerce from Wpclever. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
WPC Shop as a Customer for WooCommerce: Improper Privilege Management
The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0 This is due to the plugin not properly validating the target user's role prior to issuing a n
- 8.1 High severity
WPC Shop as a Customer for WooCommerce: Use of Insufficiently Random Values
The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to account takeover and privilege escalation in all versions up to, and including, 1.2.8. This is due to the 'generate_key' function not producing a sufficiently random value. This m
- 8.8 High severity
WPC Shop as a Customer for WooCommerce: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce wpc-shop-as-customer allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through <= 1.2.6.