CVEvulnerability
CVE-2022-0775
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-863
Description
The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment
Affected configurations
• woocommerce woocommerce (< 6.2.1)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/ Release Notes
- https://plugins.trac.wordpress.org/changeset/2683324 Patch
- https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/ Exploit, Third Party Advisory
- https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/ Release Notes
- https://plugins.trac.wordpress.org/changeset/2683324 Patch
- https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/ Exploit, Third Party Advisory