Beveiligingsadvies

CVE-2024-1732

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-02 09:32:09
Laatst bijgewerkt 2026-04-08 16:50:40
Toegewezen door Wordfence
CVSS-score 5.3
Status PUBLISHED

Beschrijving

The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wads_removeProductFromShop() function in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to delete arbitrary posts.