Security Advisory

CVE-2023-0865

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-20 15:52:15

Last updated 2025-02-26 14:33:12

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high privilege users, allowing any authenticated users, such as subscriber to add/update/duplicate/delete as well as retrieve addresses of other users.

← Browse all CVEs View on cve.org ↗