Medium · 4.3 CVE-2022-38141 EUVD-2022-40743GHSA-v5c8-894r-mxm7

WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

Published Jan 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: zorem Product: Sales Report Email for WooCommerce Category: Web / CMS

Description

Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8.

Affected products

Vendor	Product	Affected	Fixed
Zorem	Sales Report Email for WooCommerce	≤ 2.8	—

References

https://patchstack.com/database/vulnerability/woo-advanced-sales-report-email/wordpress-sales-report-email-for-woocommerce-plugin-2-8-auth-test-email-submission-vulnerability?_s_id=cve vdb-entry