Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-89289 The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order…

Description

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fast Courier 5.2 premières → 5.2.3 Pas de correctif indiqué

Autres CVE de Fast Courier

Les 2 CVE de Fast Courier →
CVE-2026-89288 The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on… 8.6 Élevée
Suivre cette CVE