Account Manager for WooCommerce, 22c9e9d692c9c42ed198da08221ad28cdfb42ad9

CVE, Research URL: 22c9e9d692c9c42ed198da08221ad28cdfb42ad9
Home page URL: Security reports for Account Manager for WooCommerce
Application: Account Manager for WooCommerce
Published on: Oct 13, 2022
Research Description: Account Manager for WooCommerce [account-manager-woocommerce] <= 2.1.1 (unfixed) WordPress Account Manager for WooCommerce plugin <= 2.0.19 - Broken Access Control vulnerability Broken Access Control vulnerability leading to the export of sensitive information (user id, first name, last name) by the subscriber or higher role user discovered by WordPress Account Manager for WooCommerce plugin (versions <= 2.0.19). No patched version is available. No reply from the vendor.
Affected versions: max 2.1.1.
Status: vulnerable