medium5.3
CVE-2025-11237
The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing …
Impact
The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated user, such as a Subscriber, to update arbitrary WordPress options.
Affected products
| Product | Affected versions |
|---|---|
| Make Email Customizer For WooCommerce WordPress Plugin | through 1.0.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.