Skip to content
Sign in
4.9 Medium

CVE-2024-1310 The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking…

Description

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

Affected products and versions

Product Affected versions Fixed in
WooCommerce 8.6 earliest → < 8.6 8.6

Other CVEs of WooCommerce

The 3 CVEs of WooCommerce →
CVE-2022-0775 The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which… 4.3 Medium CVE-2022-2099 The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and… Not rated
Track this CVE