CVE-2024-1310 — WooCommerce < 8.6 - Contributor+ Private/Draft Products Access
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft a…
Published: 2024-04-15 · CVSS: 4.9 · CVSS 3.1
The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7