Sendcloud for WooCommerce: Automated Shipping, Branded Tracking & Returns
1 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 5.4
Sendcloud for WooCommerce 1.0.41 Missing Authorization via AJAX Actions
Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers, to access the sc_support_get and sc_support_save AJAX actions due to the absence of capability and n…