8.1
High
CVE-2024-0399 The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter…
Description
The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by Subscriber+ role.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooCommerce Customers Manager 29.7 | earliest → < 29.7 | 29.7 |
| woocommerce_customers_manager 29.7 | earliest → < 29.7 | 29.7 |
Other CVEs of WooCommerce Customers Manager
The 6 CVEs of WooCommerce Customers Manager →
CVE-2024-3983
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which…
8.1
High
CVE-2024-2843
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could…
6.5
Medium
CVE-2024-1747
The WooCommerce Customers Manager WordPress plugin before 30.2 does not have authorisation and CSRF in various AJAX…
6.5
Medium
CVE-2024-1743
The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before…
5.9
Medium