CVE-2025-31802

{"id": "CVE-2025-31802", "cveTags": [], "metrics": {}, "published": "2025-04-01T15:16:19.343", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/shiptimize-for-woocommerce/vulnerability/wordpress-shiptimize-for-woocommerce-plugin-3-1-86-settings-change-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shiptimize for WooCommerce: from n/a through <= 3.1.86."}, {"lang": "es", "value": "Vulnerabilidad de falta de autorizaci\u00f3n en Shiptimize Shiptimize for WooCommerce permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Shiptimize para WooCommerce desde la versi\u00f3n n/d hasta la 3.1.86."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "audit@patchstack.com"}