Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WooCommerce Customers Manager 29.8 Clear all filters
TI-2024-01634 CVE-2024-1756 · GHSA-j23h-727c-9qvf

WooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosure

Priority LOW 29

The WooCommerce Customers Manager WordPress plugin before 29.8 does not have authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber, to call it and retrieve the list of customer em…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00319 Published 2024-04-24 Fixed in 29.8 CWE-352
TI-2024-01621 CVE-2024-1743 · GHSA-v2jq-jcj2-vg39

WooCommerce Customers Manager < 29.8 - Reflected XSS

Priority MEDIUM 60

The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could…

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00315 Published 2024-04-24 Fixed in 29.8 CWE-79