WP e-Commerce – Store Toolkit <= 2.0.1 - Missing Authorization
2016-02-15 00:00
James GolovichStrategic Overview
StatusPatched in 2.0.2
Affected PluginWP e-Commerce – Store Toolkit
Affected Version
<= 2.0.1CVSS9.8Critical
CVE
N/AVulnerability Overview
The WP e-Commerce – Store Toolkit plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the ~/store-toolkit.php file in versions up to, and including 2.0.1. This makes it possible for unauthenticated attackers to perform actions like resetting file download sales in addition to other sensitive administrative actions.
Technical Analysis
REMEDIATION: Update to version 2.0.2, or a newer patched version --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C