CVE-2023-3365

PoC —

CVSS 3.1

8.1 high

EPSS

<1%p53

Published

Aug 7, 2023 (Aug 7, 2023)

Modified

Jun 17, 2026

Description

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users, such as subscriber to delete arbitrary shipment

Vendors: multiparcels
Products: multiparcels shipping for woocommerce
Ecosystems: WordPress, E-commerce
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.