Mrw Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:mrw:mrw_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mrw (821def4d-9135-5b84-a2b3-032213cf4f99) |
|---|---|
| Product | Mrw Plugin (ec224555-daa9-548c-90cd-68cb48c426b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6506 |
vulnerable | 2026-06-08 06:58:19.621280 |
Information exposure vulnerability in the MRW plug-in
HIGH (8.2)
Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrw_log" functionality. This vulnerability could allow a remote attacker to obtain other customers' order information and access sensitive information such as name and phone number. This vulnerability also allows an attacker to create or overwrite shipping labels.
Published: 2024-07-04T12:52:15.521Z
Updated: 2024-08-01T21:41:03.535Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.