CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship for AliExpress Dropship and Affiliate: from n/a through 2.2.3.
Explanation of Vulnerability in Simple Terms
Sharkdropship for AliExpress Dropship and Affiliate through version 2.2.3 lacks proper authorization checks on certain functions. An unauthenticated attacker can modify data or disrupt service availability without needing to log in or interact with a user. The vulnerability affects the plugin's core functionality and requires immediate patching.
What an attacker can do
Modify plugin data or disrupt service without authentication.
Potential impact on your site
Attackers can alter dropship settings, product data, or affiliate configurations remotely.
Conditions required to exploit
Network access only; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
