WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability

Summary

Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

Remediation

1. Inventory every RealMag777 HUSKY deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://patchstack.com/database/wordpress/plugin/woocommerce-products-filter/vulnerability/wordpress-husky-plugin-1-4-6-broken-access-control-vulnerability?_s_id=cve