PT-2024-16942 · WordPress · Subaccounts For Woocommerce

Name of the Vulnerable Software and Affected Versions: Subaccounts for WooCommerce plugin for WordPress versions up to, and including, 1.6.0 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web...