CVE-2024-0617 — Category Discount Woocommerce <= 4.12 - Missing Authorization via wpcd_save_discount()
The Category Discount Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcd_save_discount() function …
Published: 2024-01-25 · CVSS: 5.3 · CVSS 3.1
The Category Discount Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcd_save_discount() function in all versions up to, and including, 4.12. This makes it possible for unauthenticated attackers to modify product category discounts that could lead to loss of revenue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7