CVE-2022-0775

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p50

Published

Jan 16, 2024 (Jan 16, 2024)

Modified

Jun 17, 2026

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Vendors: woocommerce
Products: woocommerce
Ecosystems: WordPress, E-commerce
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.