WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Cod… (CVE-2022-1563)

Résumé

WPGraphQL WooCommerce <= 0.11.0 - Unauthenticated Coupon Codes Disclosure

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web github.com