GCVE - cpe:2.3:a:felipe152:integração_entre_eduzz_e

Approved changes feed: RSS · Atom

cpe:2.3:a:felipe152:integração_entre_eduzz_e_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Felipe152 (`4a703d9f-ffd0-54ad-bf9c-5b11491a3635`)
Product	Integração Entre Eduzz E Woocommerce (`cc478395-4c85-57c0-bfb4-23dbc2bf4d3e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-3906`	vulnerable	2026-06-08 07:23:10.122438	Integração entre Eduzz e Woocommerce 1.5.0 - 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation HIGH (8.8) The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit the default registration role within the plugin's registration flow to Administrator, which allows any user to create an Administrator account. Published: 2025-04-26T05:34:24.565Z Updated: 2026-04-08T17:31:14.104Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/eb85ed32-c391-45d2-9e86-cb97009210cd?source=cve https://plugins.trac.wordpress.org/browser/integracao-entre-eduzz-e-wc-powers/trunk/admin/class-wep-admin.php#L120 https://plugins.trac.wordpress.org/browser/integracao-entre-eduzz-e-wc-powers/trunk/include/class-wep-webhook.php#L7 https://plugins.trac.wordpress.org/browser/integracao-entre-eduzz-e-wc-powers/trunk/wep-powers.php#L19	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.