Skip to content
OpenAdvisories

Product · ThemeHigh

Email Customizer for WooCommerce (Pro)

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter

    The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows use…