Lucene search
AutomatticWoocommerce
2 matches found
CVE-2024-1310
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
4.9CVSS9.3AI score0.00228EPSS
CVE-2024-22155
Cross-Site Request Forgery (CSRF) vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.5.2.
4.3CVSS5AI score0.00227EPSS