Unauthorized Access Vulnerability in Active Products Tables for WooCommerce by WordPress

CVE-2024-0797

What is CVE-2024-0797?

The Active Products Tables for WooCommerce plugin for WordPress is susceptible to unauthorized access due to a lack of proper capability checks on multiple functions. This oversight affects all versions up to and including 1.0.6.1, permitting users with subscriber roles or higher to execute functions that are intended solely for admin use. As a result, this vulnerability could lead to unintended modifications and access to sensitive administrative capabilities.

References