Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6974-v8m9-mmj5

Опубликовано: 19 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.

EPSS

Процентиль: 78%
0.01161
Низкий

7.5 High

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.

EPSS

Процентиль: 78%
0.01161
Низкий

7.5 High

CVSS3

Дефекты

CWE-552