Advisories · Technology
railmedia Order Tip for WooCommerce.
Every CVE that names railmedia Order Tip for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
- railmedia Order Tip for WooCommerce
- CWE-602
- CVSS 5.3 Medium
Order Tip for WooCommerce <= 1.3.1 - Missing Authorization to Unauthenticated Data Export
- railmedia Order Tip for WooCommerce
- Broken access control