Incorrect Authorization Vulnerability Affects Docket's WooCommerce Collections / Wishlist / Watchlist

CVE-2024-43131

What is CVE-2024-43131?

An authorization flaw in WPWeb Docket, used in WooCommerce Collections, Wishlist, and Watchlist, permits unauthorized access to functionalities that are not appropriately secured by Access Control Lists (ACLs). This vulnerability permits attackers to exploit weaknesses in the plugin's permissions model, allowing them to perform actions that should be restricted. The issue is present in Docket versions prior to 1.7.0, emphasizing the necessity for users to update and secure their WooCommerce installations.

References