WordPress HUSKY – Products Filter for WooCommerce Professional plugin <= 1.3.4.2 - Broken Access Control vulnerability

CVE-2023-40334

Summary

The HUSKY plugin developed by Realmg777 is impacted by a missing authorization vulnerability, which arises from erroneously configured access control security levels. This flaw can potentially allow unauthorized users to gain access to restricted areas or functionalities of the plugin, jeopardizing the overall security of WooCommerce sites utilizing this plugin. All versions prior to 1.3.4.2 are vulnerable, demanding immediate attention and remediation by webmasters.

References