| |
Vulnerability CVE-2024-0399
Published: 2024-04-15
| Description: |
The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by Subscriber+ role. |
References: |
https://wpscan.com/vulnerability/1550e30c-bf80-48e0-bc51-67d29ebe7272/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
