CVE-2024-10614

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cancelimport function in all versions up to, and including, 5.61.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, t...

WordPress plugin Customer Reviews for WooCommerce has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-16410

Name of the Vulnerable Software and Affected Versions Customer Reviews for WooCommerce plugin versions up to, and including, 5.61.0 Description The issue arises from a missing capability check on the cancel import function, allowing authenticated attackers with Subscriber-level access and above t...