The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/a7735feb-876e-461c-9a56-ea6067faf277/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/a7735feb-876e-461c-9a56-ea6067faf277/ | Exploit Third Party Advisory |
Configurations
History
27 May 2025, 16:13
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Automattic
Automattic woocommerce |
|
| CPE | cpe:2.3:a:automattic:woocommerce:*:*:*:*:*:wordpress:*:* | |
| References | () https://wpscan.com/vulnerability/a7735feb-876e-461c-9a56-ea6067faf277/ - Exploit, Third Party Advisory | |
| CWE | NVD-CWE-noinfo |
21 Nov 2024, 08:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/a7735feb-876e-461c-9a56-ea6067faf277/ - |
31 Oct 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
15 Apr 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-15 05:15
Updated : 2025-05-27 16:13
NVD link : CVE-2024-1310
Mitre link : CVE-2024-1310
CVE.ORG link : CVE-2024-1310
JSON object : View
Products Affected
automattic
- woocommerce
CWE