The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access. This means that people with access to the plugin can gain access to certain features without permission. This issue affects versions up to, and including, 5.36.0. An attacker with access to the plugin as a “subscriber” can use it to cancel exports and see progress reports on exports.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
