6.2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-31	CVE-2023-51503	Unspecified vulnerability in Automattic Woopayments Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 6.9.2. network low complexity automattic	7.5
2023-12-14	CVE-2023-49828	Cross-site Scripting vulnerability in Automattic Woopayments Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo allows Stored XSS.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 6.4.2. network low complexity automattic CWE-79	5.4