Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WooCommerce Customers Manager 30.1 Clear all filters
TI-2024-03715 CVE-2024-3983 · GHSA-f8wm-p3c6-g898

WooCommerce Customers Manager < 30.1 - Bulk Action via CSRF

Priority HIGH 68

The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00312 Published 2024-08-01 Fixed in 30.1 CWE-352
TI-2024-02653 CVE-2024-2843 · GHSA-xhpw-qr8c-jfj2

WooCommerce Customers Manager < 30.1 - User Deletion via CSRF

Priority MEDIUM 62

The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00253 Published 2024-08-01 Fixed in 30.1 CWE-352