Vulnerabilities > CVE-2023-32747 - Authorization Bypass Through User-Controlled Key vulnerability in Automattic Woocommerce Bookings 1.15.78

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
automattic
CWE-639

Summary

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Bookings.This issue affects WooCommerce Bookings: from n/a through 1.15.78.

Vulnerable Configurations

Part Description Count
Application
Automattic
1