CVE-2023-51497

MEDIUM 5.4CVE-2023-51497 · Published 14/06/2024 · updated 17/06/2026

In short

CVE-2023-51497 is a MEDIUM (CVSS 5.4) vulnerability affecting shipping multiple addresses (woocommerce).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 24.3% of all vulnerabilities.
Fix: update to 3.8.10 or later.

Package	Affected versions	Patched versions
shipping multiple addresses woocommerce	`< 3.8.10`	`3.8.10`

Description

Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.9.

References

patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-9-broken-access-control-vulnerability · Third Party Advisory

More vulnerabilities in shipping multiple addresses

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free