CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Github Security Blog•added 2022/05/24 5:37 p.m.•43 views

WooCommerce Incorrect Authorization

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...

5.3CVSS7.3AI score0.04026EPSS

SaveExploits2References4Affected Software1

osv-cve•added 2020/12/27 7:15 p.m.•38 views

CVE-2020-29156

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...

5.3CVSS7AI score

SaveExploits0References2

Mend•added 2020/12/27 6:47 p.m.•3 views

CVE-2020-29156

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...

6.9CVSS0.04026EPSS

SaveExploits2References4

CVE•added 2020/12/27 6:47 p.m.•132 views

CVE-2020-29156

The CVE concerns the WooCommerce plugin for WordPress, affecting versions prior to 4.7.0. A defect in the fetch_order_status action permits remote attackers to disclose the status of arbitrary orders by supplying an order_id. The root cause is improper authorization/validation in the order status...

5.3CVSS5.3AI score0.04026EPSS

SaveExploits2References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/12/27 12:00 a.m.•6 views

CVE-2020-29156: Authorization Bypass Through User-Controlled Key

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the orderid parameter in a fetchorderstatus action...

5.3CVSS6AI score0.04026EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by