未評価
The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a...
CVE-2026-118072
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| CVE | Fraud Prevention For WooCommerce and EDD |
2.3.6 未満 |
2.3.6 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to manage orders before letting them add an order's customer details to the store's fraud blacklist, which could allow users with the Subscriber role and above to prevent arbitrary legitimate customers from placing orders.
出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
参照URL
- web contact@wpscan.com
- web nvd.nist.gov
- web wpscan.com
- web github.com