Mitigation Strategies

Immediate mitigation steps include disabling or restricting access to the '/wp-json/InkXEProductDesignerLite/orders' REST API endpoint to prevent unauthenticated access.

You should update the Riaxe Product Customizer plugin to a version later than 2.4 if available, or apply any patches provided by the vendor.

Additionally, consider implementing authentication and authorization checks on the endpoint to ensure only authorized users can access sensitive order data.

Useful 0 Not Useful 0

Executive Summary

The Riaxe Product Customizer plugin for WordPress has a vulnerability in its REST API endpoint '/wp-json/InkXEProductDesignerLite/orders'. This endpoint is accessible without any authentication or authorization checks because its permission callback is set to always allow access.

As a result, anyone can query this endpoint and retrieve sensitive information related to WooCommerce orders, including customer first and last names, customer IDs, order IDs, order totals, order dates, currencies, and order statuses.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthenticated attackers to access sensitive customer and order information from a WooCommerce store.

• Exposure of personal customer data such as names and customer IDs.
• Disclosure of order details including order IDs, totals, dates, currencies, and statuses.

Such exposure can lead to privacy violations, potential identity theft, and loss of customer trust.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking if the '/wp-json/InkXEProductDesignerLite/orders' REST API endpoint is accessible without authentication and returns WooCommerce order data including sensitive customer information.

You can use commands like curl to test the endpoint from your system or network. For example:

• curl -X GET https://your-wordpress-site.com/wp-json/InkXEProductDesignerLite/orders

If the response contains customer first and last names, customer IDs, order IDs, order totals, order dates, currencies, or order statuses without requiring authentication, your system is vulnerable.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated attackers to access sensitive customer and order information, including names, customer IDs, order details, and statuses, without any authentication or authorization checks.

Such exposure of personal and order data can lead to non-compliance with data protection regulations like GDPR and HIPAA, which require strict controls over access to personally identifiable information and sensitive data.

By allowing unauthorized access to customer data, the vulnerability increases the risk of data breaches and potential violations of privacy laws and standards.

Useful 0 Not Useful 0