Unauthenticated Information Disclosure in Product Feed PRO for WooCommerce

Executive Summary

This vulnerability affects the Product Feed PRO for WooCommerce plugin before version 13.5.7. It allows unauthenticated users to access and disclose a store's feed configuration, including rules, filters, and field mapping. It also enables enumeration of the full product category taxonomy due to a missing authorization check on a REST read route.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your WordPress site uses the 'Product Feed PRO for WooCommerce' plugin version prior to 13.5.7. You can inspect the plugin version via the WordPress admin dashboard under Plugins or by querying the database. Additionally, test the affected REST route by accessing /wp-json/wc/v3/product_feed_pro_config without authentication to see if it returns sensitive data.

• Check plugin version in WordPress admin or via SQL query: SELECT * FROM wp_options WHERE option_name LIKE '%product_feed_pro%';
• Test the REST endpoint: curl -X GET http://your-site.com/wp-json/wc/v3/product_feed_pro_config

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to view sensitive store configuration details without authentication. This includes product feed rules, filters, and mappings, as well as the entire product category structure. Such exposure could aid further attacks or competitive intelligence.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the 'Product Feed PRO for WooCommerce' plugin to version 13.5.7 or later. If updating is not possible, consider disabling the plugin temporarily until an update is applied. Ensure your WordPress site and all plugins are regularly updated to prevent similar issues.

Useful 0 Not Useful 0