WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

CVE-2022-40702

What is CVE-2022-40702?

A missing authorization vulnerability has been identified in the Zorem Advanced Local Pickup for WooCommerce plugin. This flaw allows unauthorized users to access restricted functionalities, which can lead to exploitation of user data and manipulation of transactions. The vulnerability impacts versions from n/a to 1.5.2, exposing any systems utilizing this plugin to potential security breaches. It is crucial for users and administrators to apply the necessary patches and review access controls to mitigate associated risks.

References