Unknown Woocommerce vulnerabilities

CVE-2024-1310 [MEDIUM] CWE-284 CVE-2024-1310: The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor rol The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)

CVE-2022-0775 [MEDIUM] CWE-863 CVE-2022-0775: The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment

CVE-2022-2099 [MEDIUM] CWE-116 CVE-2022-2099: The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles