CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Distance Based Shipping Calculator: from n/a through <= 2.0.22.
Explanation of Vulnerability in Simple Terms
The Distance Based Shipping Calculator plugin for WordPress contains a missing authorization flaw that allows unauthenticated attackers to modify shipping data. An attacker can send network requests to alter shipping rates or settings without needing valid credentials. This affects all versions up to 2.0.22. Site owners should update to a version newer than 2.0.22 when available.
What an attacker can do
Modify shipping calculator settings and rates without authentication.
Potential impact on your site
Attackers can alter shipping costs, disrupting orders and potentially causing financial loss.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
