Unrated severityNVD Advisory· Published May 2, 2022· Updated Aug 3, 2024
Tipsacarrier < 1.5.0.5 - Unauthenticated Orders Disclosure
CVE-2021-25002
Description
The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URL
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Tipsacarrier plugindescription
- Range: <1.5.0.5
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/b14f476e-3124-4cbf-91b4-ae53c4dabd7cmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.