Make Email Customizer for WooCommerce, CVE-2025-11237

CVE, Research URL: CVE-2025-11237
Home page URL: Security reports for Make Email Customizer for WooCommerce
Application: Make Email Customizer for WooCommerce
Published on: Nov 11, 2025
Research Description: The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.
Affected versions: max 1.0.6.
Status: vulnerable