9.1
Critique
CVE-2025-15484 The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant…
Description
The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Order Notification for WooCommerce 3.6 | premières → < 3.6.3 | 3.6.3 |