Fix for data leak (emails all customers when bulk)

  • Line 30:

    $wc_emails['WC_Email_Cancelled_Order']->recipient = \explode( ',', $wc_emails['WC_Email_Cancelled_Order']->recipient )[0] . ',' . $email_cliente;

    Unless fixed, this plugin must not be active when bulk cancelling. Since that is not easy to restrict, keep it inactive..

  • You must be logged in to reply to this topic.