YayPricing Plugin Pricing Overwrite and Information Disclosure

Executive Summary

The YayPricing WordPress plugin before version 3.5.7 has a vulnerability where it does not perform proper capability checks on certain REST API routes. Instead, it relies on a shared nonce, which allows any authenticated user, including subscribers, to modify the store's pricing configuration and access private coupon codes.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the YayPricing plugin in WordPress. If it is below 3.5.7, the system is vulnerable. Use commands like 'wp plugin list' in WP-CLI or inspect the plugin files in the WordPress plugins directory.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthorized users to change pricing settings and view private coupon codes, potentially leading to financial losses, unauthorized discounts, or exposure of sensitive information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to pricing configurations and private coupon codes, potentially exposing sensitive financial or customer data. For GDPR, this may violate principles of data protection and user privacy if personal data is involved. For HIPAA, if coupon codes or pricing data relate to healthcare services, it could risk protected health information exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Update the YayPricing plugin to version 3.5.7 or higher immediately. If updating is not possible, consider disabling the plugin temporarily until an update is applied.

Useful 0 Not Useful 0