Automattic: >> Woocommerce >> 3.6.7 Security Vulnerabilities
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
CVSS Score
4.9
EPSS Score
0.007
Published
2024-04-15
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooCommerce, Automattic WooCommerce Blocks allows Stored XSS.This issue affects WooCommerce: from n/a through 8.1.1; WooCommerce Blocks: from n/a through 11.1.1.
CVSS Score
6.5
EPSS Score
0.008
Published
2023-11-30