Critical · published December 25, 2024
🚨 An unauthenticated user can hijack any admin's account with a simple email change! The WooCommerce Point of Sale plugin is hiding a privilege escalation bug in all versions up to 6.1.0. 🔥 Think of it like a restaurant where anyone can slip a note to the host, claiming to be a VIP, and get a table change without a reservation. This vulnerability allows attackers to change user emails and passwords without breaking a sweat, much like swapping out the name on the reservation list. An attacker could seize control of an admin account by changing its email and resetting the password. This opens the door for them to access sensitive data, change settings, or even wreak havoc on the entire site, which could be absolutely devastating for your business and customers!
Think of it like a restaurant where anyone can slip a note to the host, claiming to be a VIP, and get a table change without a reservation. This vulnerability allows attackers to change user emails and passwords without breaking a sweat, much like swapping out the name on the reservation list. This privilege escalation vulnerability stems from insufficient validation of the 'logged_in_user_id' value, allowing attackers to manipulate email addresses of arbitrary user accounts, including those of administrators.
An attacker could seize control of an admin account by changing its email and resetting the password. This opens the door for them to access sensitive data, change settings, or even wreak havoc on the entire site, which could be absolutely devastating for your business and customers! Immediately update the WooCommerce Point of Sale plugin to version 6.1.1 or higher. Review user account permissions and monitor logs for any suspicious changes while ensuring that proper validation checks are in place for user inputs. You've got this! Follow these steps to secure your site and boost your security hero status! 🛡️