Update the WordPress WooCommerce plugin to the latest available version (at least 6.6.0).
Taurus Omar discovered and reported this Broken Access Control vulnerability in WordPress WooCommerce Plugin. This vulnerability has been fixed in version 6.6.0.
Orders Status Change (via PayPal Standard Gateway) vulnerability
10.03.2022
Path Traversal via Importers vulnerability
23.02.2022
Arbitrary Comment Deletion vulnerability
23.02.2022
Analytics Report Leaks vulnerability
22.09.2021
Unauthenticated SQL Injection (SQLi) vulnerability
15.07.2021