Analytical use of cookies
CVE-2023-4703: all in one b2b for woocommerce vulnerability
CVE-2023-4703: high vulnerability affecting all in one b2b for woocommerce. Check CVSS, KEV status, business impact and recommended administrator actions.
- CVSS
- 7.5 HIGH
- EPSS
- 43.71%
- Known exploited
- not in KEV
- Product
- all in one b2b for woocommerce
What is known
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly validate parameters when updating user details, allowing an unauthenticated attacker to update the details of any user. Updating the password of an Admin user leads to privilege escalation.
Business impact
Successful exploitation of CVE-2023-4703, a high vulnerability (CVSS 7.5) affecting all in one b2b for woocommerce, may affect the confidentiality, integrity or availability of the vulnerable environment. The exact impact depends on the installed version, exposed interfaces and deployment configuration.
Recommended administrator action
Confirm whether all in one b2b for woocommerce is present and compare installed versions with the vendor advisory and NVD record. Apply the vendor patch or documented mitigation; until remediation is complete, reduce exposure of affected interfaces, review relevant logs and monitor for indicators of exploitation. DataHouse can support version verification, managed patching, network exposure reduction, log review and backup validation for dedicated, cloud and colocated environments.