Description
WordPress Plugin WooCommerce is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently create accounts via checkout block request. WordPress Plugin WooCommerce version 4.6.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.6.2 or latest
References
Related Vulnerabilities
Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)
MySQL CVE-2011-2262 Vulnerability (CVE-2011-2262)
WordPress Plugin Keep Backup Daily Unspecified Vulnerability (2.0.3)
WordPress Plugin lasTunes Cross-Site Scripting (3.6.1)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2402)