Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation

Vulnerability

The Customer Reviews for WooCommerce plugin for WordPress contains a missing capability check on the cancel_import() function in all versions up to and including 5.61.0 [1]. This function is intended for administrative use but lacks proper authorization, making it accessible to any authenticated user regardless of their role.

Exploitation

An attacker needs only a valid WordPress account with Subscriber-level access or higher. They can call the cancel_import() function via AJAX or direct request to cancel an ongoing import process or check its status. No additional privileges or user interaction are required.

Impact

Successful exploitation allows an attacker to cancel imports or check the status of import operations. This could disrupt import workflows and potentially lead to denial of service or information disclosure about import status. The impact is limited to the import functionality.

Mitigation

The plugin has been patched in version 5.62.0 or later. Users should update to the latest version (5.109.0 as of the reference) [1]. No workarounds are provided. The vulnerability is not listed in CISA KEV.