mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-03 17:08:02 +02:00
782 B
782 B
CVE-2023-3365
Description
The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users, such as subscriber to delete arbitrary shipment