The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to. (e.g. private, draft and trashed products)
| Software | From | Fixed in |
|---|---|---|
| automattic / woocommerce | - | 8.6 |