CVE-2024-35748 WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability

2024-06-0918:41:02

CWE-862

Patchstack

www.cve.org

wordpress

woocommerce

dropshipping

unauthenticated

email sending

authorization

vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.0005 Low

EPSS

Percentile

17.0%

JSON

Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "WooCommerce Dropshipping",
    "vendor": "OPMC",
    "versions": [
      {
        "lessThanOrEqual": "5.0.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/woocommerce-dropshipping/wordpress-woocommerce-dropshipping-plugin-5-0-4-unauthenticated-arbitrary-email-sending-vulnerability?_s_id=cve