CVE-2022-0775

Publication date

2024-01-16 15:52:36

Family

WPScan

State

PUBLISHED

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment