Aller au contenu
Se connecter
4.9 Moyenne

CVE-2024-1310 The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking…

Description

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

Produits et versions touchés

Produit Versions touchées Corrigé en
WooCommerce 8.6 premières → < 8.6 8.6

Autres CVE de WooCommerce

Les 3 CVE de WooCommerce →
CVE-2022-0775 The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which… 4.3 Moyenne CVE-2022-2099 The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and… Non notée
Suivre cette CVE