Path field in advanced CSV importer was broken due to an esc_url call

Skrevet den 15. oktober 201818. oktober 2025 af i WooCommerce

Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure

4. september 2026

Plugin is vulnerable to unauthorized…

Læs mere »

Improper Access Control Vulnerability — Admin Panel Bypass

4. september 2026

A vulnerability in the access…

Læs mere »

Shortcode Injection via Merge Tag Values in Ninja Forms

3. september 2026

Ninja Forms does not neutralize…

Læs mere »

This fix removes the incorrect esc_url() call and replaces it with wc_clean() instead.

This vulnerability affects the following application versions:

WooCommerce 3.4.0
WooCommerce 3.4.0-beta.1
WooCommerce 3.4.0-rc.1
WooCommerce 3.4.0-rc.2

Skriv et svar Annuller svar

Om os

Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.

Læs mere om os her: https://standoutmedia.dk/