Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57625
HistoryJun 30, 2022 - 12:00 a.m.

WordPress WooCommerce plugin arbitrary file deletion vulnerability

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
wordpress
woocommerce
plugin
arbitrary file deletion
vulnerability
unauthenticated attacker
php
product configurator
effective filtering
file deletion.

EPSS

0.001

Percentile

47.4%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress WooCommerce plugin versions prior to 1.2.32 are vulnerable to arbitrary file deletion, which stems from a lack of effective filtering and restrictions on file deletion in the product configurator. An unauthenticated attacker could exploit this vulnerability to cause arbitrary file deletion.

EPSS

0.001

Percentile

47.4%

Related for CNVD-2022-57625