Hieupenguinnn

**Name of the Vulnerable Software and Affected Versions** Colissimo Officiel : Méthodes de livraison pour WooCommerce versions prior to 2.9.1 **Description** An unauthenticated Insecure Direct Object Reference (IDOR) exists in the software. IDOR is a type of access control vulnerability that occurs when an application provides direct access to objects based on user-supplied input without sufficient authorization checks. **Recommendations** Update Colissimo Officiel : Méthodes de livraison pour WooCommerce to version 2.9.1 or later.

**Name of the Vulnerable Software and Affected Versions** Newsletters versions 4.13 and earlier **Description** An unauthenticated broken access control issue exists in the newsletters-lite plugin, allowing unauthorized users to bypass access restrictions. **Recommendations** Update to a version later than 4.13.

**Name of the Vulnerable Software and Affected Versions** SupportCandy versions prior to 3.4.7 **Description** An Insecure Direct Object Reference (IDOR) exists, which occurs when an application provides direct access to objects based on user-supplied input, potentially allowing unauthorized access to data. **Recommendations** Update to a version newer than 3.4.6.

**Name of the Vulnerable Software and Affected Versions** Melhor Envio versions prior to 2.16.4 **Description** The Melhor Envio plugin for WordPress contains a broken authentication flaw caused by a missing capability check in a function. This allows authenticated users with Subscriber-level permissions or higher to perform unauthorized actions. **Recommendations** Update the plugin to version 2.16.4 or later.