Woocommerce Customers Manager (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-01. Vendor: Unknown.

CVEs of Woocommerce Customers Manager

• CVE-2024-2843 - CVSS 6.5 (medium), 2024-08-01: The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin…
• CVE-2024-3983 - CVSS 8.1 (high), 2024-08-01: The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in…
• CVE-2024-1747 - CVSS 6.5 (medium), 2024-08-01: The WooCommerce Customers Manager WordPress plugin before 30.2 does not have authorisation and CSRF in various AJAX actions, allowing any authenticated users,…
• CVE-2024-1756 - CVSS 6.5 (medium), 2024-04-24: The WooCommerce Customers Manager WordPress plugin before 29.8 does not have authorisation and CSRF in an AJAX action, allowing any authenticated users, such…
• CVE-2024-1743 - CVSS 5.9 (medium), 2024-04-24: The WooCommerce Customers Manager WordPress plugin before 29.8 does not sanitise and escape various parameters before outputting them back in pages and…
• CVE-2024-0399 - CVSS 8.1 (high), 2024-04-15: The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading…