Skip to content
OpenAdvisories

Product · woocommerce

WooCommerce Smart Coupons

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    WooCommerce Smart Coupons <= 4.6.0 - Unauthenticated Coupon Creation

    The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the woocommerce_coupon_admin_init function in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attack…