Woo Aliexpress Dropshipping Vulnerabilities

[en] Missing Authorization vulnerability in wooproductimporter Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1.

Affected:

up to 2.1.2

Fixed in:

2.1.2

Disclosed:

Dec 9, 2024

CVE-2023-49848 on NVD →

[en] Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1.

Affected:

up to 2.1.2

Fixed in:

2.1.2

Disclosed:

May 9, 2024

CVE-2024-32724 on NVD →

The SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the theShark_alibay_removeProductFromShop() function in all versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers t...

CVSS:

5.3

Affected:

up to 2.1.1

Fixed in:

2.1.2

Disclosed:

Apr 22, 2024

CVE-2024-32724 on NVD →

The Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.1.1

Fixed in:

2.1.2

Disclosed:

Dec 6, 2023

CVE-2023-49848 on NVD →