Lucene search

K
cvelistMitreCVELIST:CVE-2020-29156
HistoryDec 27, 2020 - 6:47 p.m.

CVE-2020-29156

2020-12-2718:47:31
mitre
www.cve.org
2
wordpress
woocommerce
remote attack
order status

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

53.9%

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

53.9%