Log out
Get PRO

Latest

Access violation vulnerability in Checkout Mestres do WP for WooCommerce 8.7.5

  • Severity: critical
  • Status: Fixed
  • Publication: March 28, 2025

The Checkout Mestres do WP for WooCommerce plugin for WordPress has a security issue that allows unauthorized changes to be made to data. This can lead to someone gaining more privileges than they should have. The problem is caused by a missing check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. Attackers who are not logged in can take advantage of this vulnerability to change any settings on the WordPress site. They can even change the default role for new user registrations to administrator, which would give them full control over the site.

Detected in:

Checkout Mestres do WP for WooCommerce fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.