CVE-2024-1310

PoC —

CVSS 3.1

4.9 medium

EPSS

<1%p51

Published

Apr 15, 2024 (Apr 15, 2024)

Modified

Jul 20, 2026

Description

The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

Vendors: automattic
Products: woocommerce
Ecosystems: WordPress, E-commerce
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.