Lucene search
PatchstackCVELIST:CVE-2023-32799HistoryDec 21, 2023 - 6:22 p.m.
CVE-2023-32799 WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)
2023-12-2118:22:30
CWE-639
Patchstack
www.cve.org
wordpress
woocommerce
plugin
idor
authorization bypass
vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.1%
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Shipping Multiple Addresses",
"vendor": "WooCommerce",
"versions": [
{
"changes": [
{
"at": "3.8.4",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.8.3",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
prion
prion
Authorization
2023-12-21 19:15:00
nvd
nvd
CVE-2023-32799
2023-12-21 19:15:08
wpexploit
wpexploit
cve
cve
CVE-2023-32799
2023-12-21 19:15:08
wordfence
wordfence
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.1%
Related for CVELIST:CVE-2023-32799