Sharkdropship for AliExpress Dropshipping and Affiliate < 2.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

Description The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wadsremoveProductFromShop function in all versions up to, and including, 2.2.4. This makes it possible for unauthenticat...

Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy <= 2.1.2 - Missing Authorization

Description The plugin is vulnerable to unauthorized access due to a missing capability check on an unknown function, allowing unauthenticated attackers to perform an unauthorized action...

WordPress Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy Plugin <= 2.1.1 is vulnerable to Broken Access Control

Software Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49848 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID...

WordPress Sharkdropship for AliExpress Dropship and Affiliate Plugin <= 2.2.3 is vulnerable to Broken Access Control

Software Sharkdropship for AliExpress Dropship and Affiliate Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30870 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID...