← Back

Tipsacarrier

tipsacarrier

Vendor: Tipsacarrier Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-25002
1Tipsacarrier Project
1Tipsacarrier
Jun 17, 2026
May 2, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client ful...Show more
The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URLShow less