Insufficient validation on the request retrieving reports was performed, enabling remote execution of arbitrary scripting code in the target’s web browser. This scripting code would be executed within the security context of the WordPress admin panel.
This vulnerability affects the following application versions:
- WooCommerce 1.2
- WooCommerce 1.2.1
- WooCommerce 1.2.2
- WooCommerce 1.2.3
- WooCommerce 1.2.4
- WooCommerce 1.3
- WooCommerce 1.3.1
- WooCommerce 1.3.2
- WooCommerce 1.4
- WooCommerce 1.4.1
- WooCommerce 1.4.2
- WooCommerce 1.4.3
- WooCommerce 1.4.4
- WooCommerce 1.5
- WooCommerce 1.5.1
- WooCommerce 1.5.2
- WooCommerce 1.5.2.1
- WooCommerce 1.5.3
- WooCommerce 1.5.4
- WooCommerce 1.5.5
- WooCommerce 1.5.6
- WooCommerce 1.5.7
- WooCommerce 1.5.7.1
- WooCommerce 1.5.8
- WooCommerce 1.6.0
- WooCommerce 1.6.1
- WooCommerce 1.6.2
- WooCommerce 1.6.3
- WooCommerce 1.6.4
- WooCommerce 1.6.5
- WooCommerce 1.6.5.1
- WooCommerce 1.6.5.2
- WooCommerce 1.6.6
- WooCommerce 2.0.0
- WooCommerce 2.0.0-RC1
- WooCommerce 2.0.0-RC2
- WooCommerce 2.0.0-RC3
- WooCommerce 2.0.1
- WooCommerce 2.0.2
- WooCommerce 2.0.3
- WooCommerce 2.0.4
- WooCommerce 2.0.5
- WooCommerce 2.0.6
- WooCommerce 2.0.7
- WooCommerce 2.0.8
- WooCommerce 2.0.9
- WooCommerce 2.0.10
- WooCommerce 2.0.11
- WooCommerce 2.0.12
- WooCommerce 2.0.13
- WooCommerce 2.0.14
- WooCommerce 2.0.15
- WooCommerce 2.0.16
- WooCommerce 2.0.17
- WooCommerce 2.0.18
- WooCommerce 2.0.19
- WooCommerce 2.0.20
- WooCommerce 2.1.0
- WooCommerce 2.1.0-RC1
- WooCommerce 2.1.0-RC2
- WooCommerce 2.1.1
- WooCommerce 2.1.2
- WooCommerce 2.1.3
- WooCommerce 2.1.4
- WooCommerce 2.1.5
- WooCommerce 2.1.6
- WooCommerce 2.1.7
- WooCommerce 2.1.8
- WooCommerce 2.1.9
- WooCommerce 2.1.10
- WooCommerce 2.1.11
- WooCommerce 2.1.12
- WooCommerce 2.2.0
- WooCommerce 2.2.0-RC1
- WooCommerce 2.2.1
- WooCommerce 2.2.2
- WooCommerce 2.2.3
- WooCommerce 2.2.4
- WooCommerce 2.2.5
- WooCommerce 2.2.6
- WooCommerce 2.2.7
- WooCommerce 2.2.8
- WooCommerce 2.2.9
- WooCommerce 2.2.10