Lucene search
GoogleOSV:GHSA-WWH8-V3J3-GXFWHistoryMay 24, 2022 - 5:37 p.m.
WooCommerce Incorrect Authorization
2022-05-2417:37:26
Google
osv.dev
5
woocommerce
plugin
authorization
status viewing
vulnerability
wordpress
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.
Related
prion
prion
Deserialization of untrusted data
2020-12-27 19:15:00
wpexploit
wpexploit
WooCommerce < 4.7.0 - Arbitrary Order Status Disclosure via IDOR
2020-12-28 00:00:00
patchstack
patchstack
wpvulndb
wpvulndb
WooCommerce < 4.7.0 - Arbitrary Order Status Disclosure via IDOR
2020-12-28 00:00:00
osv
osv
CVE-2020-29156
2020-12-27 19:15:11
githubexploit
githubexploit
Exploit for Authorization Bypass Through User-Controlled Key in Woocommerce
2020-12-21 20:38:50
github
github
WooCommerce Incorrect Authorization
2022-05-24 17:37:26
nvd
nvd
CVE-2020-29156
2020-12-27 19:15:11
openvas
openvas
WordPress WooCommerce Plugin < 4.7.0 Information Disclosure Vulnerability
2021-01-15 00:00:00
cve
cve
CVE-2020-29156
2020-12-27 19:15:11
cvelist
cvelist
CVE-2020-29156
2020-12-27 18:47:31