A popular tool called WooCommerce Point of Sale, used with WordPress, has a security issue that affects all versions up to 6.1.0. This happens because the tool does not check for certain information when a specific option is empty. This allows attackers to change the email of any user, even administrators, and reset their password to gain access to their account.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
