Lucene search
Vlad Vector (Patchstack)PATCHSTACK:CECE4FD48A466C73B0305B21D9AD55D0HistoryAug 01, 2022 - 12:00 a.m.
WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change
2022-08-0100:00:00
Vlad Vector (Patchstack)
patchstack.com
8
0.001 Low
EPSS
Percentile
19.5%
Authenticated IDOR vulnerability leading to PayPal email change discovered by Vlad Vector (Patchstack) in WordPress Affiliate For WooCommerce premium plugin (versions <= 4.7.0).
Solution
Update the WordPress Affiliate For WooCommerce plugin to the latest available version (at least 4.8.0).
| CPE | Name | Operator | Version |
|---|---|---|---|
| affiliate for woocommerce | le | 4.7.0 |
Related
cve
cve
CVE-2022-36284
2022-08-05 16:15:14
wpvulndb
wpvulndb
Affiliate For WooCommerce < 4.8.0 - Subscriber+ Paypal Email Update via IDOR
2022-08-02 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-36284
2022-08-05 16:15:14
prion
prion
Design/Logic Flaw
2022-08-05 16:15:00