WooCommerce Multiple Customer Addresses & Shipping vulnerabilities
We track 1 vulnerability in WooCommerce Multiple Customer Addresses & Shipping products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest WooCommerce Multiple Customer Addresses & Shipping vulnerabilities
- 8.8 High severity
WooCommerce Multiple Customer Addresses &…: Authorization Bypass Through User-Controlled Key
The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high privilege users, allowing any authenticate