CVE-2023-30870 — WordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulner…

CVE-2023-30870

WordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities PUBLISHED

Description (CNA)

Missing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship for AliExpress Dropship and Affiliate: from n/a through 2.2.3.

Affected (CNA)

Vendor / product	Versions
wooproductimporter / Sharkdropship for AliExpress Dropship and Affiliate	affected n/a through 2.2.3

CWE

CWE-862

References

https://patchstack.com/database/wordpress/plugin/wooshark-aliexpress-importer/vulnerability/wordpress-sharkdropship-for-aliexpress-dropship-and-affiliate-plugin-2-2-3-multiple-broken-access-control-vulnerabilities?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.