Description
WordPress Plugin WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently create accounts via checkout block request. WordPress Plugin WooCommerce version 4.6.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.6.2 or latest
References
Related Vulnerabilities
ownCloud Improper Authentication Vulnerability (CVE-2023-49105)
OpenSSL Out-of-bounds Write Vulnerability (CVE-2016-2182)
WordPress Plugin AmazonFeed Cross-Site Scripting (2.1)
Oracle Database Server CVE-2021-2173 Vulnerability (CVE-2021-2173)
WordPress Plugin WP Photo Album 'id' Parameter Cross-Site Scripting (1.5.1)