Non évaluée
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch...
CVE-2020-29156
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory raw.githubusercontent.com
- report github.com