CVE-2020-29156

Published December 27th, 2020

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.

Ko-kn3t/CVE-2020-29156

woocommerce wordpress plugin - Affected Version: V 4.5.2 [CVE-2020-29156]

GitHub