High severity7.5NVD Advisory· Published May 2, 2022· Updated Jun 17, 2026
CVE-2021-25002
CVE-2021-25002
Description
The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URL
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:tipsacarrier_project:tipsacarrier:*:*:*:*:*:wordpress:*:*Range: <1.5.0.5
- WordPress/Tipsacarrier plugindescription
- Range: <1.5.0.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/b14f476e-3124-4cbf-91b4-ae53c4dabd7cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.