CVE-2024-32724CWE-862

WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability

High · published May 9, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00759 · 54.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-05-09T12:20Z
EPSS history
Timeline
  • 09 MAY 12:20Z
    WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability
    cvelistv5