Vulnerabilities > CVE-2024-35748 - Missing Authorization vulnerability in Opmc Woocommerce Dropshipping 4.4/5.0.4

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

NVD

Published: 2024-06-09

Updated: 2024-06-12

Summary

Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4.

Vulnerable Configurations

Part	Description	Count
Application	Opmc Opmc Woocommerce Dropshipping - Opmc Woocommerce Dropshipping 4.4 Opmc Woocommerce Dropshipping 5.0.4	3

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

References

https://patchstack.com/database/vulnerability/woocommerce-dropshipping/wordpress-woocommerce-dropshipping-plugin-5-0-4-unauthenticated-arbitrary-email-sending-vulnerability?_s_id=cve

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.