title: WooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment Deletion
description: The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment
problem types: CWE-863 Incorrect Authorization
affected:
{
vendor: Unknown
product: WooCommerce
versions:
status: affected, versionType: semver, version: 0, lessThan: 6.2.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}