WooCommerce Customers Manager vulnerabilities
We track 2 vulnerabilities in WooCommerce Customers Manager products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2024.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest WooCommerce Customers Manager vulnerabilities
- 8.1 High severity
WooCommerce Customers Manager: Cross-Site Request Forgery
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks
- 8.1 High severity
WooCommerce Customers Manager: Improper Neutralization of Special Elements used in an SQL Command
The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by Subscriber+ role.