Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in WooCommerce 4.6.2

  • Severity: medium-risk
  • Status: Open
  • Publication: November 5, 2020

The WooCommerce plugin for WordPress, used for creating online stores, is vulnerable to a security issue. It is possible for someone to create a user account during checkout, even if the setting to allow this has been disabled. These security flaws affect versions of the WooCommerce plugin up to and including version 4.6.1, and the WooCommerce Blocks plugin up to and including version 3.7.1.

Detected in:

WooCommerce fixed vulnerable versions: >= * < 4.6.2
WooCommerce Blocks open vulnerable versions: >= * < 3.7.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.