← Database

CVE-2022-0775

MEDIUM CVSS: 4.3 Published: 2024-01-16 Modified: 2026-06-17

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Affected Platforms

Woocommerce Woocommerce

Weakness Type

CWE-863

References