CVE-2023-3366 (published 2023-08-21T12:29:50.443Z)
The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any logged in user, delete arbitrary shipment via a CSRF attack
Affected products: Vendor: Unknown
Product: MultiParcels Shipping For WooCommerce
Versions: 0