CVE-2022-25649

概要

参考情報

• dzv365zjfbd8v.cloudfront.net/changelogs/affiliate-for-woocommerce/changelog.txt · Release Notes
• patchstack.com/database/vulnerability/affiliate-for-woocommerce/wordpress-affiliate-for-woocommerce-premium-plugin-4-7-0-multiple-improper-access-control-vulnerabilities · Third Party Advisory

affiliate for woocommerce のその他の脆弱性

• CVE-2022-36284中 6.5Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change th…