CVE-2021-25002 — Tipsacarrier < 1.5.0.5 - Unauthenticated Orders Disclosure
The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data whi…
Published: 2022-05-02 · CVSS: Unscored
The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URL
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7