CVE-2020-29156

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a…

published December 27, 2020

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04026 · 90.5th percentile
Published
2020-12-27T18:47Z
EPSS history
Timeline
  • 27 DEC 18:47Z
    The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a…
    cvelistv5