Plug Your Woocommerce Into The Largest Catalog Of Customized Print Products From Helloprint
Approved changes feed: RSS · Atom
cpe:2.3:a:helloprint:plug_your_woocommerce_into_the_largest_catalog_of_customized_print_products_from_helloprint:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Helloprint (b28304cb-c5b4-543a-9ec9-6df83e3d9928) |
|---|---|
| Product | Plug Your Woocommerce Into The Largest Catalog Of Customized Print Products From Helloprint (068fd767-ccf3-56ec-8f3f-84b28ffae68f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13666 |
vulnerable | 2026-06-08 07:06:32.448976 |
Helloprint <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification
MEDIUM (5.3)
The Helloprint plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.2. This is due to the plugin registering a public REST API endpoint without implementing authorization checks to verify request authenticity. This makes it possible for unauthenticated attackers to arbitrarily modify WooCommerce order statuses via the /wp-json/helloprint/v1/complete_order_from_helloprint_callback endpoint by providing a valid order reference ID.
Published: 2025-12-06T05:49:27.167Z
Updated: 2026-04-08T16:50:54.147Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.