
Ko-kn3t/CVE-2020-29156
Releases0
Stars3
woocommerce wordpress plugin - Affected Version: V 4.5.2 [CVE-2020-29156]
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 5.3 MEDIUM | 5 MEDIUM | ||
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action. | |||