← CVE Intelligence

CVE-2024-1310

WooCommerce < 8.6 - Contributor+ Private/Draft Products Access PUBLISHED

Description (CNA)

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

Affected (CNA)

Vendor / productVersions
Unknown / WooCommerceaffected 0 before 8.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.