CVE-2023-37989

Summary

CVE-2023-37989 is a Missing Authorization vulnerability affecting Easyship WooCommerce Shipping Rates from versions n/a through 0.9.0. Hackers can exploit this issue by taking advantage of incorrectly configured access control security levels, potentially gaining unauthorized access to sensitive information or functionality within the system. This weakness may pose a significant risk to websites utilizing the Easyship plugin for WooCommerce, making it crucial for affected users to apply the necessary patches or upgrades as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.