CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Deserialization of Untrusted Data vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows Object Injection.This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through <= 1.5.
Explanation of Vulnerability in Simple Terms
The Multiple Shipping And Billing Address For Woocommerce plugin through version 1.5 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code on affected sites. The vulnerability requires no user interaction and can be exploited remotely over the network. Sites running this plugin are at immediate risk of complete compromise.
What an attacker can do
Run arbitrary code on the site and take complete control of it.
Potential impact on your site
Complete site compromise, data theft, malware installation, and loss of customer data.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
