Product
An authenticated RCE vulnerability in the Email Customizer for WooCommerce plugin allows subscriber-level users to inject and execute arbitrary PHP code.