| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2020-29156 | 27 Dec 202022:27 | – | circl |
 | WordPress plugin WooCommerce 权限许可和访问控制问题漏洞 | 27 Dec 202000:00 | – | cnnvd |
 | WooCommerce Permission License and Access Control Issues Vulnerability | 28 Dec 202000:00 | – | cnvd |
 | CVE-2020-29156 | 27 Dec 202018:47 | – | cvelist |
 | EUVD-2022-5657 | 27 Dec 202018:47 | – | euvd |
 | WooCommerce Incorrect Authorization | 24 May 202217:37 | – | github |
 | CVE-2020-29156 | 27 Dec 202019:15 | – | nvd |
 | WordPress WooCommerce Plugin < 4.7.0 Information Disclosure Vulnerability | 15 Jan 202100:00 | – | openvas |
 | GHSA-WWH8-V3J3-GXFW WooCommerce Incorrect Authorization | 24 May 202217:37 | – | osv |
 | WordPress WooCommerce plugin <= 4.6.2 - Sensitive Information Disclosure vulnerability | 10 Nov 202000:00 | – | patchstack |
10
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| order_id | query param | /wp-admin/admin-ajax.php | Allows remote attackers to view the status of arbitrary orders via the order_id parameter in the fetch_order_status action | CWE-639 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:11Current
5.3Medium risk
Vulners AI Score5.3
CVSS 25
CVSS 3.15.3
EPSS0.04026