Critical · 9.8 CVE-2023-51481 EUVD-2023-56194GHSA-qp5v-mr8w-r9gw

WordPress Local Delivery Drivers for WooCommerce plugin <= 1.9.0 - Unauthenticated Account Takeover vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: powerfulwp Product: Local Delivery Drivers for WooCommerce Category: Web / CMS

Description

Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege Escalation.This issue affects Local Delivery Drivers for WooCommerce: from n/a through 1.9.0.

Affected products

Vendor	Product	Affected	Fixed
powerfulwp	Local Delivery Drivers for WooCommerce	≤ 1.9.0	—

References

https://patchstack.com/database/vulnerability/local-delivery-drivers-for-woocommerce/wordpress-local-delivery-drivers-for-woocommerce-plugin-1-9-0-unauthenticated-account-takeover-vulnerability?_s_id=cve vdb-entry