eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
mediumThe eBay Dropshipping and Affiliate by Wooshark plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions located in the ~/woocommerce-reviews-manager_init.php file that are called via nopriv AJAX actions in versions up to, and including, 1.5.6. This makes it possi...
- CVSS:
- 6.5
- Affected:
- up to 1.5.6
- Fix:
- No patched version reported
- Disclosed:
- Jun 22, 2022