CyberRota Analysis
AI analysis pending.
CVE
CVE-2023-3366
Severity
MEDIUM
CVSS
4.3
EPSS
0.23%
WordPress
Original NVD Description
The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any logged in user, delete arbitrary shipment via a CSRF attack