Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in WooCommerce – Store Exporter 1.8.4

  • Severity: critical
  • Status: Open
  • Publication: February 10, 2016

The WooCommerce – Store Exporter plugin for WordPress has a security issue that allows someone without the right authorization to access private information. This is due to a missing check in a certain function in versions of the plugin up to and including 1.8.3. This means that an unauthenticated person can gain access to sensitive data that should not be revealed.

Detected in:

Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers fixed vulnerable versions:
Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More fixed vulnerable versions:
WooCommerce – Store Exporter open vulnerable versions: >= * < 1.8.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.