EUVD-2026-15736
GHSA-56w7-56c6-q9m8
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
3Description
Missing Authorization vulnerability in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automated FedEx live/manual rates with shipping labels: from n/a through <= 5.1.8.
Analysis
A missing authorization vulnerability in the Aarsiv Groups Automated FedEx live/manual rates with shipping labels WordPress plugin (versions up to 5.1.8) allows attackers to exploit incorrectly configured access control security levels to bypass authentication and gain unauthorized access to sensitive shipping and rate functionality. The vulnerability is classified as CWE-862 (Missing Authorization) and represents a broken access control flaw that could allow unauthenticated or low-privileged attackers to manipulate FedEx shipping operations. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today