CVE-2024-0797

Name of the Vulnerable Software and Affected Versions The Active Products Tables for WooCommerce versions up to, and including, 1.0.6.1

Description The issue allows unauthorized access to functionality due to a missing capability check on several functions. This makes it possible for subscribers and higher to execute functions intended for admin use.

Recommendations For versions up to, and including, 1.0.6.1, consider disabling the vulnerable functions until a patch is available. Restrict access to admin-intended functions to minimize the risk of exploitation.