CVE-2025-60159
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-26

Last updated on: 2026-04-23

Assigner: Patchstack

Description
Missing Authorization vulnerability in webmaniabr Nota Fiscal Eletrônica WooCommerce nota-fiscal-eletronica-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nota Fiscal Eletrônica WooCommerce: from n/a through <= 3.4.0.9.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-26
Last Modified
2026-04-23
Generated
2026-05-07
AI Q&A
2025-09-26
EPSS Evaluated
2026-05-05
NVD
CVE-2025-60159
EUVD
EUVD-2025-31246
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
wordpress nota_fiscal_eletronica_woocommerce *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a Missing Authorization issue in the webmaniabr Nota Fiscal Eletrônica WooCommerce plugin. It allows attackers to exploit incorrectly configured access control security levels, meaning that users may be able to perform actions or access data they are not authorized to.


How can this vulnerability impact me? :

The vulnerability can lead to unauthorized actions or access within the affected WooCommerce plugin, potentially allowing attackers with limited privileges to perform operations they should not be able to. This could result in integrity issues but does not impact confidentiality or availability.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart