Description
Missing Authorization vulnerability in Dotstore Product Size Charts Plugin for WooCommerce woo-advanced-product-size-chart.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through <= 2.4.5.
Published: 2025-01-24
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Product Size Charts Plugin for WooCommerce contains a missing authorization flaw that permits unauthorized users to access or modify product size chart data. Attackers could retrieve sensitive configuration or alteration information, potentially impacting inventory visibility and pricing accuracy. This weakness is classified as CWE‑862 Broken Access Control.

Affected Systems

The vulnerability is present in Dotstore’s Product Size Charts Plugin for WooCommerce versions up to and including 2.4.5. WordPress sites running these versions with WooCommerce will be affected.

Risk and Exploitability

The CVSS score is 4.3, indicating moderate risk. EPSS is less than 1 %, implying a low probability of current exploitation. The plugin is not listed in the CISA KEV catalog. The likely attack vector is a web‑based interaction with the plugin’s administrative interface or REST endpoints that do not enforce proper access checks.

Generated by OpenCVE AI on May 1, 2026 at 19:01 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Product Size Charts Plugin for WooCommerce to version 2.4.6 or later.
  • If an update cannot be applied immediately, restrict access to the plugin’s settings and data management pages to administrator roles only.
  • Verify that no other user roles have been erroneously granted capabilities to view or edit size charts.

Generated by OpenCVE AI on May 1, 2026 at 19:01 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3587 Missing Authorization vulnerability in theDotstore Product Size Charts Plugin for WooCommerce.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through 2.4.5.
History

Thu, 23 Apr 2026 15:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}

Wed, 01 Apr 2026 23:45:00 +0000

Type Values Removed Values Added
Description Missing Authorization vulnerability in theDotstore Product Size Charts Plugin for WooCommerce.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through 2.4.5. Missing Authorization vulnerability in Dotstore Product Size Charts Plugin for WooCommerce woo-advanced-product-size-chart.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through <= 2.4.5.
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}

Fri, 24 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 24 Jan 2025 15:45:00 +0000

Type Values Removed Values Added
Description Missing Authorization vulnerability in theDotstore Product Size Charts Plugin for WooCommerce.This issue affects Product Size Charts Plugin for WooCommerce: from n/a through 2.4.5.
Title WordPress Product Size Charts Plugin for WooCommerce plugin <= 2.4.5 - Broken Access Control vulnerability
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-04-28T16:11:27.382Z

Reserved: 2025-01-16T11:33:22.829Z

Link: CVE-2025-23991

cve-icon Vulnrichment

Updated: 2025-01-24T16:02:01.407Z

cve-icon NVD

Status : Deferred

Published: 2025-01-24T16:15:38.723

Modified: 2026-06-17T08:57:51.017

Link: CVE-2025-23991

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-01T19:15:24Z

Weaknesses