CVE-2024-6987 - Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation

Back Back to CVE browser

MEDIUM

Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation

Published Aug 8, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchid_store_activate_plugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate the Addonify Floating Cart For WooCommerce plugin if it is installed.

Affected products

Vendor Themebeez Product Orchid Store Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.5.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Themebeez

Orchid Store

unaffected

Version	Status	Constraints
0	affected	<=1.5.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (3)

Link	Providers	Tags
https://themes.trac.wordpress.org/browser/orchid-store/1.5.6/functions.php#L300		Product
https://themes.trac.wordpress.org/changeset/237704/		Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/5402f206-0375-4c47-8a5c-e8ea5742493d?source=cve		Third Party Advisory