Unrated

WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion

CVE-2022-0775 First seen on SecPulse Jan 17, 2024

Original description The description as published by the source.

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch plugins.trac.wordpress.org
report wpscan.com
web developer.woocommerce.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jan 17, 2024
First seen on SecPulse: Jan 17, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55