📦 Woocommerce Customers Manager

The WooCommerce Customers Manager plugin for WordPress has a privilege escalation vulnerability that allows authenticated users with Subscriber-level access or higher to elevate their privileges to ad...

The WooCommerce Customers Manager WordPress plugin before version 30.1 lacks CSRF protection on certain bulk actions, allowing attackers to trick logged-in administrators into performing unauthorized ...

This SQL injection vulnerability in WooCommerce Customers Manager allows attackers with Subscriber or higher WordPress roles to execute arbitrary SQL commands on the database. It affects WordPress sit...

This vulnerability in the WooCommerce Customers Manager WordPress plugin allows any authenticated user, even with low privileges like subscriber, to perform unauthorized AJAX actions to create, update...