Handmade Dropshipping For Etsy And Woocommerce
Monthly
Missing authorization in the HANDMADE - Dropshipping for Etsy and WooCommerce plugin through 1.0.10 lets a low-privileged authenticated user perform actions that should be restricted, with the assessed CVSS 7.1 impact concentrated on availability (A:H) and limited integrity effects (I:L) rather than data disclosure. The plugin must be installed and active on a WordPress/WooCommerce site, the attacker needs network access and a valid low-privilege account, and no user interaction is required; the exact vulnerable feature or endpoint is not described in the available sources. No public exploit identified at time of analysis, and this is a moderate-priority issue rather than a top-tier emergency.
Missing authorization in the HANDMADE - Dropshipping for Etsy and WooCommerce plugin through 1.0.10 lets a low-privileged authenticated user perform actions that should be restricted, with the assessed CVSS 7.1 impact concentrated on availability (A:H) and limited integrity effects (I:L) rather than data disclosure. The plugin must be installed and active on a WordPress/WooCommerce site, the attacker needs network access and a valid low-privilege account, and no user interaction is required; the exact vulnerable feature or endpoint is not described in the available sources. No public exploit identified at time of analysis, and this is a moderate-priority issue rather than a top-tier emergency.