WordPress plugin
WooCommerce Customers Manager security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High3
- Medium6
- Low0
All WooCommerce Customers Manager vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Missing Authorization to Authenticated (Subscriber+) Privilege Escalation ≤31.3Update to 31.4 | CVE-2024-13343 | |
| Medium6.4 | Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting ≤30.1Update to 30.2 | CVE-2024-1747 | |
| Medium5.4 | Cross-Site Request Forgery to Customer Deletion <30.1Update to 30.1 | CVE-2024-3983 | |
| Medium5.4 | Cross-Site Request Forgery to Customer Deletion via 'Delete' <30.1Update to 30.1 | CVE-2024-2843 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤29.7Update to 29.8 | CVE-2024-1743 | |
| Medium4.3 | Missing Authorization to Information Exposure ≤29.7Update to 29.8 | CVE-2024-1756 | |
| Critical9.9 | Authenticated (Subscriber+) SQL Injection ≤29.6Update to 29.7 | CVE-2024-0399 | |
| High8.8 | Cross-Site Request Forgery to Account Creation <26.6Update to 26.6 | — | |
| Medium6.1 | Reflected Cross-Site Scripting ≤26.5Update to 26.6 | — | |
| High8.8 | Authenticated Account Creation and Privilege Escalation <26.5Update to 26.5 | — |
- High8.8Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
≤31.3Update to 31.4
- Medium6.4Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
≤30.1Update to 30.2
- Medium5.4Cross-Site Request Forgery to Customer Deletion
<30.1Update to 30.1
- Medium5.4Cross-Site Request Forgery to Customer Deletion via 'Delete'
<30.1Update to 30.1
- Medium6.1Reflected Cross-Site Scripting
≤29.7Update to 29.8
- Medium4.3Missing Authorization to Information Exposure
≤29.7Update to 29.8
- Critical9.9Authenticated (Subscriber+) SQL Injection
≤29.6Update to 29.7
- High8.8Cross-Site Request Forgery to Account Creation
<26.6Update to 26.6
- Medium6.1Reflected Cross-Site Scripting
≤26.5Update to 26.6
- High8.8Authenticated Account Creation and Privilege Escalation
<26.5Update to 26.5
WooCommerce Customers Manager: common questions
Does WooCommerce Customers Manager have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WooCommerce Customers Manager: 1 critical, 3 high, 6 medium. None are known to affect version null.
How do I check which version of WooCommerce Customers Manager I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WooCommerce Customers Manager vulnerability?
CVE-2024-13343, published Jan 31, 2025: WooCommerce Customers Manager <= 31.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation. Severity: High (CVSS 8.8).
Is any WooCommerce Customers Manager vulnerability listed in CISA KEV?
No. None of the known WooCommerce Customers Manager vulnerabilities is currently listed in the CISA KEV catalog.