Datalogics Ecommerce Delivery vulnerabilities
We track 1 vulnerability in Datalogics Ecommerce Delivery products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Datalogics Ecommerce Delivery vulnerabilities
- 9.8 Critical severity
Datalogics Ecommerce Delivery: Improper Privilege Management
The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option `datalogics_token` without verification. This token is subsequently used for authentication in a protecte