Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/04/15 5:0 a.m.34 views

CVE-2024-1310 WooCommerce < 8.6 - Contributor+ Private/Draft Products Access

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. e.g. private, draft and trashed products...

6.7AI score0.0068EPSS
SaveExploits2References1
Rows per page
Query Builder