Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxff-8g4p-xj2g

Опубликовано: 07 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP

EPSS

Процентиль: 40%
0.00182
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP

EPSS

Процентиль: 40%
0.00182
Низкий

8.8 High

CVSS3

Дефекты

CWE-352