Description
WordPress Plugin WooCommerce Email Test is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information (orders, customer details, email address, cart content, payment type, etc.) that may help in launching further attacks. WordPress Plugin WooCommerce Email Test version 1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.6 or latest
References
https://www.jansass.com/team-wpscantastic-findet-sicherheitsluecke-in-woocommerce-email-test/
https://wordpress.org/plugins/woocommerce-email-test/changelog/
Related Vulnerabilities
Apache Tomcat Off-by-one Error Vulnerability (CVE-2023-28709)
WordPress Plugin Social Sharing-Social Warfare Malicious Code (4.4.7.1)
Ruby Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-28965)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.12)
Joomla! Core 3.x.x Multiple Cross-Site Scripting Vulnerabilities (3.0.0 - 3.8.7)