Lucene search
WpvulndbWPVDB-ID:03078497-03B9-4A97-80D8-1CC8EDEA1C04HistoryJan 12, 2024 - 12:00 a.m.
Product Delivery Date for WooCommerce – Lite < 2.7.1 - Missing Authorization
2024-01-1200:00:00
wpscan.com
3
woocommerce
wordpress
unauthorized access
Description The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the prdd_delete_all_special_delivery() function in versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to delete special deliveries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.7.1 |
Related
wordfence
wordfence
6.4 Medium
AI Score
Confidence
High
0 Low
EPSS
Percentile
0.0%
Related for WPVDB-ID:03078497-03B9-4A97-80D8-1CC8EDEA1C04