woocommerce_customers_manager vulnerabilities

2 known vulnerabilities in woocommerce_customers_manager from WooCommerce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  WooCommerce Customers Manager: Cross-Site Request Forgery

  CVE-2024-3983Aug 1, 2024WooCommerce Customers Manager

  The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks

• 8.1 High severity

  WooCommerce Customers Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-0399Apr 15, 2024WooCommerce Customers ManagerEPSS 2.88%

  The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by Subscriber+ role.