Now officially on WordPress.org

CVE Database / CVE-2020-36834

CVE · Medium

CVE-2020-36834 — Discount Rules for WooCommerce [woo-discount-rules] < 2.1.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-36834 Discount Rules for WooCommerce [woo-discount-rules] < 2.1.0 Missing Authorization Medium 6.3 < 2.1.0 2.1.0 2020-08-20 —

CVE-2020-36834

The Discount Rules for WooCommerce plugin in versions up to 2.0.2 contains an authorization bypass vulnerability in multiple AJAX actions that lack proper capability verification. Attackers with subscriber-level access can exploit this flaw to modify discount rules and alter plugin configurations without proper permissions.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings