Read the docs

Woocommerce Multiple Customer Addresses & Shipping Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Woocommerce Multiple Customer Addresses & Shipping Project records in CISA KEV

No Woocommerce Multiple Customer Addresses & Shipping Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Multiple Customer Addresses & Shipping 1 record HIGH

Records

1 record

TI-2023-00820 CVE-2023-0865 · GHSA-vrv9-62rj-7748

WooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR

Priority HIGH 73

The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high pr…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01196 Published 2023-03-20 Fixed in 21.7 CWE-639
Open these records in search →