Unauthorized Data Modification in WooCommerce Plugin for WordPress
CVE-2024-11725

8.8HIGH

Key Information:

Vendor
Wordpress
Status
Sms Alert Order Notifications – WooCommerce
Vendor
CVE Published:
7 January 2025

Summary

The SMS Alert Order Notifications plugin for WooCommerce allows for unauthorized data modification due to a missing capability check in the updateWcWarrantySettings() function. This vulnerability impacts all versions up to 3.7.6. Authenticated attackers with a subscriber-level role can exploit this to update arbitrary options on a WordPress site, including changing user registration roles to administrator. This opens the door for unauthorized administrative access if the woocommerce-warranty plugin is installed, posing a significant risk to site security.

Affected Version(s)

SMS Alert Order Notifications – WooCommerce * <= 3.7.6

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/sms-alert/trun...
https://plugins.trac.wordpress.org/changeset?sfp_email=&s...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

AmrAwad
.