Dpdgroup Woocommerce Shipping
2 CVEs affecting Dpdgroup Woocommerce Shipping. Latest disclosed: 2022-12-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3999 | High | 8.1 | 2022-12-12 | The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated users, such… |
CVE-2022-4000 | Medium | 4.8 | 2022-12-12 | The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |