Beveiligingsadvies

CVE-2023-3365

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-07 14:31:21
Laatst bijgewerkt 2024-10-10 20:20:54
Toegewezen door WPScan
CVSS-score 8.1
Status PUBLISHED

Beschrijving

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users, such as subscriber to delete arbitrary shipment