nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-32799 CVE-2023-32799
MEDIUM
WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)
Record summary
CVE-2023-32799 has a selected CVSS score of 6.5 (medium).
Description
Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Shipping Multiple AddressesBrowse WooCommerce / Shipping Multiple AddressesDefault status: unaffected | CVE List | Through 3.8.3 | affected |
References
2patchstack.comvdb entry
https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve