WP e-Commerce – Store Exporter <= 1.6.6 - Missing Authorization
2016-02-15 00:00
James GolovichStrategic Overview
StatusPatched in 1.6.7
Affected PluginWP e-Commerce – Store Exporter
Affected Version
<= 1.6.6CVSS9.8Critical
CVE
N/AVulnerability Overview
The WP e-Commerce – Store Exporter plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wpsc_get_action() function in versions up to, and including 1.6.6. This makes it possible for unauthenticated attackers to gain access to restricted actions that allow them to update the plugin settings and dismiss notices among many other actions.
Technical Analysis
REMEDIATION: Update to version 1.6.7, or a newer patched version --- IDENTIFIER: CWE-269 (Improper Privilege Management) The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C