Threats tagged 'ghsa-43m8-2m67-x874'

The Premium Packages WordPress plugin versions before 7.3.1 have a vulnerability where the plugin does not verify ownership of guest orders before disclosing order details. This allows unauthenticated users who know a guest order's identifier to access sensitive information such as order status, payment status, and total amount.