Skip to content
Sign in
4.3 Medium

CVE-2022-0775 The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which…

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Affected products and versions

Product Affected versions Fixed in
WooCommerce 6.2 earliest → < 6.2.1 6.2.1

Other CVEs of WooCommerce

The 3 CVEs of WooCommerce →
CVE-2024-1310 The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking… 4.9 Medium CVE-2022-2099 The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and… Not rated
Track this CVE