8.1
Élevée
CVE-2024-0399 The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter…
Description
The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by Subscriber+ role.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WooCommerce Customers Manager 29.7 | premières → < 29.7 | 29.7 |
| woocommerce_customers_manager 29.7 | premières → < 29.7 | 29.7 |
Autres CVE de WooCommerce Customers Manager
Les 6 CVE de WooCommerce Customers Manager →
CVE-2024-3983
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which…
8.1
Élevée
CVE-2024-2843
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could…
6.5
Moyenne
CVE-2024-1747
The WooCommerce Customers Manager WordPress plugin before 30.2 does not have authorisation and CSRF in various AJAX…
6.5
Moyenne
CVE-2024-1743
The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before…
5.9
Moyenne