Background Last year we were alerted to a security issue (thanks to David Anderson) that would potentially allow users with specific capabilities (and, by default, this would include the Shop Manager role) to view user data for all users. This has the possibility of exposing sensitive information. …
WooCommerce Vulnerability Reintroduced from 7.0.1 Read More »
The details The minimum PHP version required for WooCommerce was bumped from 7.2 to 7.3 in WooCommerce 7.7 in May 2023. As part of that announcement, we mentioned that during mid 2023, we would bump the PHP requirement for WooCommerce to 7.4. Starting with version 8.2, scheduled …
Developer Advisory: For the sake of transparency, here is a detailed account of why 7.2.1 was rolled back and necessitated a 7.2.2 fix release: The details How can I tell if this affects me? You will be able to quickly see if you are experiencing …
On September 21, 2021, our team released a security patch to address a server configuration setup used by some hosts, which under the right conditions may make some analytics reports publicly available. What actions should I take? Automatic software updates began rolling out on September 21, 2021, …
Important Security Patch Released in WooCommerce Read More »
tl;dr A critical vulnerability was detected in multiple versions of WooCommerce and the WooCommerce Blocks feature plugin. Patches for each impacted version have been created and deployed automatically to vulnerable stores.. The details A security vulnerability in WooCommerce and WooCommerce Blocks was recently discovered and …
Developer Advisory: Critical Vulnerability in Multiple Versions of WooCommerce Read More »
