← CVE Intelligence

CVE-2024-1756

WooCommerce Customers Manager < 29.8 - Subscriber+ Email Disclosure PUBLISHED

Description (CNA)

The WooCommerce Customers Manager WordPress plugin before 29.8 does not have authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber, to call it and retrieve the list of customer email addresses along with their id, first name and last name

Affected (CNA)

Vendor / productVersions
Unknown / WooCommerce Customers Manageraffected 0 before 29.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.