Access violation vulnerability in Return Refund and Exchange For WooCommerce 4.5.5

The Return Refund and Exchange For WooCommerce plugin for WordPress is not secure and can be exploited by attackers. This vulnerability exists in all versions up to 4.5.5 and allows attackers with Subscriber-level access or higher to delete refund requests from other users.

Detected in:

Return Refund and Exchange For WooCommerce fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.