← CVE Intelligence

CVE-2023-3365

MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion PUBLISHED

Description (CNA)

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users, such as subscriber to delete arbitrary shipment

Affected (CNA)

Vendor / productVersions
Unknown / MultiParcels Shipping For WooCommerceaffected 0 before 1.14.14

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.