WooCommerce, CVE-2024-1310
- CVE, Research URL
- Home page URL
- Application
- Published on
- Apr 15, 2024
- Research Description
- The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
- Affected versions
-
Min -, max 8.9.3.
- Status
-
vulnerable