Threats tagged 'ghsa-pv65-f5jg-v756'

The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress versions up to 2.1.4 suffers from a sensitive information exposure vulnerability via the register_company_api endpoint. This flaw allows unauthenticated attackers to access sensitive company-related data including user IDs, billing emails, credit balances and histories, purchase limits, spend totals, and shared-cart purchase order numbers.