Advisories · Technology
WC Vendors.
Every CVE that names WC Vendors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification via IDOR
- WC Vendors
- Broken access control
- CVSS 4.3 Medium
WC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change
- WC Vendors
- Broken access control
- CVSS 4.3 Medium
WC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRF
- WC Vendors
- Cross-site request forgery (CSRF)