1 matches found
CVE-2024-13747: Missing Authorization
The WooMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'templatedeletesaved' function in all versions up to, and including, 3.0.34. This makes it possible for authenticated attackers, with Subscriber-leve...
4.3CVSS5.7AI score0.00235EPSS
SaveExploits0References1
20