Lucene search
PRIOn knowledge basePRION:CVE-2023-0865HistoryMar 20, 2023 - 4:15 p.m.
Cross site request forgery (csrf)
2023-03-2016:15:00
PRIOn knowledge base
www.prio-n.com
1
woocommerce
multiple customer addresses
shipping
wordpress
plugin
unauthorized access
user address.
The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high privilege users, allowing any authenticated users, such as subscriber to add/update/duplicate/delete as well as retrieve addresses of other users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce_multiple_customer_addresses_\\&_shipping | lt | 21.7 |
Related
wpexploit
wpexploit
cvelist
cvelist
nvd
nvd
CVE-2023-0865
2023-03-20 16:15:12
wpvulndb
wpvulndb
cve
cve
CVE-2023-0865
2023-03-20 16:15:12