CVE-2022-0775

· MEDIUMModified

← All CVEs

CVSS v3.1

4.3

EPSS

0.68%

Published

Jan 16, 2024

Modified

Jun 11, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-863

Affected Products (1)

woocommerce · woocommerce (up to 6.2.1)vulnerable

References (6)

https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/

Release Notes

https://plugins.trac.wordpress.org/changeset/2683324

Patch

https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/

ExploitThird Party Advisory

https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/

Release Notes

https://plugins.trac.wordpress.org/changeset/2683324

Patch

https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/

KEV Catalog EPSS Scores Vendors All CVEs