Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: wclovers Component: Woocommerce Multivendor Marketplace Clear all filters
TI-2023-02133 CVE-2023-2275 · GHSA-9x2h-m2w5-qq73

Missing authorization in wclovers WCFM – Multivendor Marketplace REST API for WooCommerce

Priority LOW 25

The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'get_item', 'get_order_notes' and 'add_or…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00466 Published 2023-06-09 No fix listed CWE-862