Bonanza – Woocommerce Free Gifts Lite
Approved changes feed: RSS · Atom
cpe:2.3:a:amans2k:bonanza_–_woocommerce_free_gifts_lite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Amans2K (95760b31-873b-5cc1-9730-c52062d6d266) |
|---|---|
| Product | Bonanza – Woocommerce Free Gifts Lite (66c6bc75-2717-5f11-b8b0-53b15c111cf4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6730 |
vulnerable | 2026-06-08 07:43:16.147972 |
Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success
MEDIUM (4.3)
The Bonanza – WooCommerce Free Gifts Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the xlo_optin_call() function in all versions up to, and including, 1.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set the opt in status to success.
Published: 2025-07-29T09:23:45.239Z
Updated: 2026-04-08T16:47:26.424Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.