Ko-kn3t/CVE-2020-29156

Ko-kn3t/CVE-2020-29156

Releases0
Stars3
woocommerce wordpress plugin - Affected Version: V 4.5.2 [CVE-2020-29156]

CVE History

CVEPublishedCVSS v3CVSS v2
5.3 MEDIUM5 MEDIUM

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.