A critical vulnerability was discovered in WooCommerce (versions 8.1 to 10.4.2) that, if exploited, could allow logged-in customers to access order details belonging to guest customers. This vulnerability affected the WooCommerce Store API and has the potential to expose customer order information. We currently have no evidence of the vulnerability being used or exploited outside of our own security testing progra
This vulnerability affects the following application versions:
- WooCommerce 10.0.0
- WooCommerce 10.0.0-rc.1
- WooCommerce 10.0.0-rc.2
- WooCommerce 10.0.1
- WooCommerce 10.0.2
- WooCommerce 10.0.3
- WooCommerce 10.0.4
- WooCommerce 10.1.0
- WooCommerce 10.1.0-rc.1
- WooCommerce 10.1.0-rc.2
- WooCommerce 10.1.0-rc.3
- WooCommerce 10.1.0-rc.4
- WooCommerce 10.1.1
- WooCommerce 10.1.2
- WooCommerce 10.2.0
- WooCommerce 10.2.0-beta.1
- WooCommerce 10.2.0-beta.2
- WooCommerce 10.2.0-rc.1
- WooCommerce 10.2.1
- WooCommerce 10.2.2
- WooCommerce 10.3.0
- WooCommerce 10.3.0-beta.1
- WooCommerce 10.3.0-beta.2
- WooCommerce 10.3.0-rc.1
- WooCommerce 10.3.0-rc.2
- WooCommerce 10.3.1
- WooCommerce 10.3.2
- WooCommerce 10.3.3
- WooCommerce 10.3.4
- WooCommerce 10.3.5
- WooCommerce 10.3.6
- WooCommerce 10.4.0
- WooCommerce 10.4.0-beta.1
- WooCommerce 10.4.0-beta.2
- WooCommerce 10.4.0-rc.1
- WooCommerce 10.4.1
- WooCommerce 10.4.2
- WooCommerce 8.6.0
- WooCommerce 8.6.0-rc.1
- WooCommerce 8.6.1
- WooCommerce 8.6.2
- WooCommerce 8.7.0
- WooCommerce 8.7.0-beta.1
- WooCommerce 8.7.0-beta.2
- WooCommerce 8.7.0-rc.1
- WooCommerce 8.7.1
- WooCommerce 8.8.0
- WooCommerce 8.8.0-beta.1
- WooCommerce 8.8.0-rc.1
- WooCommerce 8.8.1
- WooCommerce 8.8.2
- WooCommerce 8.8.3
- WooCommerce 8.8.4
- WooCommerce 8.8.5
- WooCommerce 8.9.0
- WooCommerce 8.9.0-beta.1
- WooCommerce 8.9.0-rc.1
- WooCommerce 8.9.1
- WooCommerce 8.9.2
- WooCommerce 8.9.3
- WooCommerce 9.0.0
- WooCommerce 9.0.0-beta.1
- WooCommerce 9.0.0-beta.2
- WooCommerce 9.0.0-rc.1
- WooCommerce 9.0.1
- WooCommerce 9.0.2
- WooCommerce 9.1.0
- WooCommerce 9.1.0-beta.1
- WooCommerce 9.1.0-rc.1
- WooCommerce 9.1.1
- WooCommerce 9.1.2
- WooCommerce 9.1.3
- WooCommerce 9.1.4
- WooCommerce 9.2.0
- WooCommerce 9.2.0-beta.1
- WooCommerce 9.2.0-rc.1
- WooCommerce 9.2.1
- WooCommerce 9.2.2
- WooCommerce 9.2.3
- WooCommerce 9.3.0
- WooCommerce 9.3.0-beta.1
- WooCommerce 9.3.0-rc.1
- WooCommerce 9.3.1
- WooCommerce 9.3.2
- WooCommerce 9.3.3
- WooCommerce 9.3.4
- WooCommerce 9.4.0
- WooCommerce 9.4.0-beta.1
- WooCommerce 9.4.0-beta.2
- WooCommerce 9.4.0-rc.1
- WooCommerce 9.4.0-rc.2
- WooCommerce 9.4.0-rc.3
- WooCommerce 9.4.0-rc.4
- WooCommerce 9.4.1
- WooCommerce 9.4.2
- WooCommerce 9.4.3
- WooCommerce 9.5.0
- WooCommerce 9.5.0-beta.1
- WooCommerce 9.5.0-beta.2
- WooCommerce 9.5.0-rc.1
- WooCommerce 9.5.1
- WooCommerce 9.5.2
- WooCommerce 9.6.0
- WooCommerce 9.6.0-beta.1
- WooCommerce 9.6.0-beta.2
- WooCommerce 9.6.0-rc.1
- WooCommerce 9.6.1
- WooCommerce 9.6.2
- WooCommerce 9.7.0
- WooCommerce 9.7.0-beta.1
- WooCommerce 9.7.0-rc.1
- WooCommerce 9.7.1
- WooCommerce 9.8.0
- WooCommerce 9.8.0-beta.1
- WooCommerce 9.8.0-rc.1
- WooCommerce 9.8.1
- WooCommerce 9.8.2
- WooCommerce 9.8.3
- WooCommerce 9.8.4
- WooCommerce 9.8.5
- WooCommerce 9.9.0
- WooCommerce 9.9.0-beta.1
- WooCommerce 9.9.0-rc.1
- WooCommerce 9.9.1
- WooCommerce 9.9.2
- WooCommerce 9.9.3
- WooCommerce 9.9.4
- WooCommerce 9.9.5
- WooCommerce trunk-snapshot