CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Marc dooder Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy woo-aliexpress-dropshipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through <= 2.1.1.
Explanation of Vulnerability in Simple Terms
Sharkdropship versions up to 2.1.1 lack proper authorization checks, allowing unauthenticated attackers to modify data or disrupt service availability. The vulnerability requires no special access or user interaction. Site administrators should update to a version newer than 2.1.1 immediately.
What an attacker can do
Modify site data or cause service disruption without authentication.
Potential impact on your site
Unauthorized changes to dropshipping data or temporary service unavailability.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
