Threats tagged 'ghsa-hf6j-pj8j-p44q'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-106025The Cargo Shipping Location for WooCommerce WordPress plugin before 6.0 does not properly restrict access to a REST Medium5.32026-11-10GCVE DatabaseCVE-2026-106025 A vulnerability in the Cargo Shipping Location plugin for WooCommerce WordPress versions before 6.0 allows unauthenticated users to manipulate order shipment statuses via a REST API endpoint due to improper access restrictions and reliance on attacker-controllable authorization values. Report on CVE-2026-106025 Vulnerability #ghsa-hf6j-pj8j-p44q	GCVE Database	2026-11-10

Page 1 of 1