CVE-2023-51481 – WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability

https://notcve.org/view.php?id=CVE-2023-51481

Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege Escalation.This issue affects Local Delivery Drivers for WooCommerce: from n/a through 1.9.0. Una vulnerabilidad de gestión de privilegios incorrecta en powerfulwp Local Delivery Drivers para WooCommerce permite la escalada de privilegios. Este problema afecta a Local Delivery Drivers para WooCommerce: desde n/a hasta 1.9.0. The Local Delivery Drivers for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'lddfw_edit_driver_service' function in all versions up to, and including, 1.9.0. This makes it possible for unauthenticated attackers to take over driver accounts. • https://patchstack.com/database/vulnerability/local-delivery-drivers-for-woocommerce/wordpress-local-delivery-drivers-for-woocommerce-plugin-1-9-0-unauthenticated-account-takeover-vulnerability?_s_id=cve • CWE-269: Improper Privilege Management CWE-862: Missing Authorization •