CVE-2022-0775

Published: Jan 16, 2024

Modified: Jun 11, 2025

PUBLISHED

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

Vendor	Product	Versions
Unknown	WooCommerce	affected `0 - < 6.2.1`

References

https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/

exploit

vdb-entry

technical-description

https://plugins.trac.wordpress.org/changeset/2683324

patch

https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-0775

Description

Affected Products

References