CVE Database /
CVE-2022-0775
CVE · Medium
CVE-2022-0775 — WooCommerce [woocommerce] < 6.2.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-0775
|
WooCommerce [woocommerce] < 6.2.1 |
Incorrect Authorization |
Medium
4.3
|
< 6.2.1
|
6.2.1 |
2022-02-22 |
—
|
CVE-2022-0775
The WooCommerce plugin through version 6.2.0 contains an authorization bypass flaw in its /wc/v2/products/ REST API endpoint that fails to properly validate user capabilities. An authenticated user with subscriber-level permissions or similar minimal account privileges can exploit this weakness to delete, modify, and access arbitrary comments and reviews. The vulnerability was remedied in version 6.2.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings