Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-0775 EUVD-2022-15830GHSA-hw3h-gc2r-whp8

WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion

Published Jan 16, 2024 · Updated Jun 11, 2025 · Assigned by WPScan

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Affected products

VendorProductAffectedFixed
— WooCommerce < 6.2.1 6.2.1

References