Description
The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WPC Smart Compare for WooCommerce | < 6.6.1 | 6.6.1 |
References
- https://wpscan.com/vulnerability/ff8a599b-e74f-485e-baf8-8d162633b2ea/ exploit vdb-entry technical-description