Auth bypass in Xforwoocommerce Add Product Tabs
CVE-2021-4337
Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wp_ajax_svx_ajax_factory function in various versions listed below. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to read, edit, or delete WordPress settings, plugin settings, and to arbitrarily list all users on a WordPress website. The plugins impacted are: Product Filter for WooCommerce < 8.2.0, Improved Product Options for WooCommerce < 5.3.0, Improved Sale Badges for WooCommerce < 4.4.0, Share, Print and PDF Products for WooCommerce < 2.8.0, Product Loops for WooCommerce < 1.7.0, XforWooCommerce < 1.7.0, Package Quantity Discount < 1.2.0, Price Commander for WooCommerce < 1.3.0, Comment and Review Spam Control for WooCommerce < 1.5.0, Add Product Tabs for WooCommerce < 1.5.0, Autopilot SEO for WooCommerce < 1.6.0, Floating Cart < 1.3.0, Live Search for WooCommerce < 2.1.0, Bulk Add to Cart for WooCommerce < 1.3.0, Live Product Editor for WooCommerce < 4.7.0, and Warranties and Returns for WooCommerce < 5.3.0.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.013 (68.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 69th percentile — 68.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: -0.000
Affected products
- Xforwoocommerce Add Product Tabs
- Xforwoocommerce Add Product Tabs For Woocommerce — versions 0
- Xforwoocommerce Autopilot Seo
- Xforwoocommerce Autopilot Seo For Woocommerce — versions 0
- Xforwoocommerce Bulk Add To Cart
- Xforwoocommerce Bulk Add To Cart For Woocommerce — versions 0
- Xforwoocommerce Comment And Review Spam Control
- Xforwoocommerce Comment And Review Spam Control For Woocommerce — versions 0
- Xforwoocommerce Floating Cart
- Xforwoocommerce Floating Cart For Woocommerce — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.wordfence.com/threat-intel/vulnerabilities/id/05481984-7c18-4ec7-8d7c-83180… (Third Party Advisory)
- blog.nintechnet.com/16-woocommerce-product-add-ons-plugins-fixed-vulnerabilitie… (Exploit, Third Party Advisory)
- xforwoocommerce.com/blog/change-log/xforwoocommerce-1-7-0/ (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-4337?
- CVE-2021-4337 is a high-severity vulnerability in Xforwoocommerce Add Product Tabs, classified under Missing Authorization. CVSS score: 8.8/10. Published 2023-06-07.
- How severe is CVE-2021-4337?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2021-4337 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.