CVE-2022-0775

CVE-2022-0775: WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion

Vendor Unknown
Product WooCommerce
Published January 16, 2024
Last update June 11, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Key dates

02Disclosure timeline

January 16, 2024 CVE published
June 11, 2025 Record updated