CVE-2020-29156

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...

WordPress WooCommerce Plugin < 4.7.0 Information Disclosure Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2020-29156

creationtimestamp| type| source ---|---|--- 2020-12-27 22:27:51+00:00| seen| https://t.me/cibsecurity/21327...

CVE-2020-29156

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...

CVE-2020-29156

The CVE concerns the WooCommerce plugin for WordPress, affecting versions prior to 4.7.0. A defect in the fetch_order_status action permits remote attackers to disclose the status of arbitrary orders by supplying an order_id. The root cause is improper authorization/validation in the order status...