Vulnerability — CVE-2023-3366

CVE-2023-3366

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-3366
Description:: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any logged in user, delete arbitrary shipment via a CSRF attack
Last updated date:: 08/24/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 08/24/2023
Reference url to background: https://wpscan.com/vulnerability/b2f06223-9352-4227-ae94-32061e2c5611