CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-38141

WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

Status: Published
Published: 2024-01-17
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zorem Sales Report Email for WooCommerce

Default version status: unaffected

n/a to ≤ 2.8affected

References

https://patchstack.com/database/vulnerability/woo-advanced-sales-report-email/wordpress-sales-report-email-for-woocommerce-plugin-2-8-auth-test-email-submission-vulnerability?_s_id=cve ↗