Threats tagged 'ghsa-g2hw-9r98-87v3'

Sendcloud for WooCommerce versions through 1.0.41 have a missing authorization vulnerability that allows authenticated low-privileged users, such as Subscribers, to access certain AJAX actions without proper capability and nonce checks. This vulnerability enables attackers to disclose integration configuration data and modify the plugin's logging verbosity. It is an incomplete fix of a previous vulnerability (CVE-2026-57760).