CVE-2021-25002

CVE-2021-25002 affects the Tipsacarrier WordPress plugin prior to 1.5.0.5. The vulnerability is due to missing authorization checks in certain functions, allowing unauthenticated users to access orders data and potentially retrieve customer PII (full address, name, phone) via a tracking URL. Affe...