← CVE Intelligence

CVE-2024-6506

Information exposure vulnerability in the MRW plug-in PUBLISHED

Description (CNA)

Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrw_log" functionality. This vulnerability could allow a remote attacker to obtain other customers' order information and access sensitive information such as name and phone number. This vulnerability also allows an attacker to create or overwrite shipping labels.

Affected (CNA)

Vendor / productVersions
MRW / MRW pluginaffected 5.4.3

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.