Vulnerability — CVE-2023-3365

CVE-2023-3365

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-3365
Description:: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users, such as subscriber to delete arbitrary shipment
Last updated date:: 08/09/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 08/09/2023
Reference url to background: https://wpscan.com/vulnerability/21ce5baa-8085-4053-8d8b-f7d3e2ae70c1