Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Products, Order & Customers Export for WooCommerce 2.0.7

  • Severity: medium-risk
  • Status: Open
  • Publication: January 10, 2024

The plugin “Products, Order & Customers Export for WooCommerce” on WordPress has a security issue that allows unauthorized users to access it. This is because certain checks were not included in the plugin’s functions. This vulnerability exists in all versions, including the latest one (2.0.7). As a result, attackers with subscriber-level access or higher can export product features and modify date filters without proper authorization.

Detected in:

Export Products, Order & Customers for WooCommerce fixed vulnerable versions:
Export Products, Orders & Customers for WooCommerce fixed vulnerable versions:
Products, Order & Customers Export for WooCommerce open vulnerable versions: >= * <= 2.0.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.