Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-31866

Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ShipDepot for WooCommerce: from n/a through 1.2.19.

Published

2025-04-01T15:16:28.680

Last Modified

2025-04-01T20:26:01.990

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-862

Affected Vendors & Products

References

https://patchstack.com/database/wordpress/plugin/ship-depot/vulnerability/wordpress-shipdepot-for-woocommerce-plugin-1-2-19-broken-access-control-vulnerability?_s_id=cve ([email protected])