WooCommerce < 4.1.0 - Unescaped Metadata when Duplicating Products

The WooCommerce changelog file was updated with the following message: "Security – Fixed unescaped meta data while duplicating products. Reported by Slavco." We will update this issue with further information as it becomes available...

WordPress WooCommerce plugin <= 3.4.5 - Authenticated Object Injection vulnerability

Authenticated Object Injection vulnerability found by Slavco in WordPress WooCommerce plugin versions = 3.4.5. Solution Update the WordPress WooCommerce plugin to the latest available version at least 3.4.6...

WooCommerce <= 3.4.5 - Authenticated Object Injection

According to WooCommerce: "Versions 3.4.5 and earlier are affected by a handful of issues that allow Shop Managers to exceed their capabilities and perform malicious actions. These issues can be exploited by users with Shop Manager capabilities or greater, and we recommend all users running...