Skip to content
OpenAdvisories
High · 7.1 CVE-2025-47463 EUVD-2025-17515GHSA-7xxh-4jmg-4jxp

WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control Vulnerability

Published Jun 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce: from n/a through <= 2.8.6.

Affected products

VendorProductAffectedFixed
Fahad Mahmood Stock Locations for WooCommerce ≤ 2.8.6 —

References