shipo vulnerabilities (CVE)

Shipo 1.6 - 1.8.0 - Authentication Bypass to Administrator

The Shipo plugin for WordPress is vulnerable to Authentication Bypass in versions 1.6 through 1.8.0. This is due to the `authenticate_rest_user()` function parsing the `LOGGED_IN_COOKIE` value and authenticating the named user without verifying the cookie's c…