Missing Authorization Flaw in WooCommerce Subscriptions

CVE-2023-50850

What is CVE-2023-50850?

A missing authorization vulnerability in WooCommerce Subscriptions enables attackers to exploit incorrectly configured access control security levels. This flaw can lead to unauthorized access to sensitive features and data within the plugin. Affected versions include all releases before 5.8.0, emphasizing the need for users to upgrade to the latest version to mitigate potential security risks. Ensuring proper security configurations is vital to protect against this vulnerability.

References