CVE-2021-25002

ALTO 7.5CVE-2021-25002 · Published 02/05/2022 · updated 17/06/2026

In breve

CVE-2021-25002 è una vulnerabilità ALTO (CVSS 7.5) che riguarda tipsacarrier (tipsacarrier project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.8% delle vulnerabilità.
Correzione: aggiornare a 1.5.0.5 o successiva.

Package	Affected versions	Patched versions
tipsacarrier tipsacarrier_project	`< 1.5.0.5`	`1.5.0.5`

Description

The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URL

References

wpscan.com/vulnerability/b14f476e-3124-4cbf-91b4-ae53c4dabd7c · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free