Unauthorized Email Sending Vulnerability in WooCommerce Plugin for WordPress
CVE-2024-3243
4.3MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 16 April 2024
What is CVE-2024-3243?
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_email() function in all versions up to, and including, 5.46.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to send arbitrary test emails.
Affected Version(s)
Customer Reviews for WooCommerce * <= 5.46.0