CVE-2022-4047

🗓️ 26 Dec 2022 12:28:13Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 allows unauthenticated users to upload arbitrary files leading to RC

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for CVE-2022-4047	14 Dec 202307:36	–	githubexploit
Circl	CVE-2022-4047	26 Sep 202310:44	–	circl
CNNVD	WordPress Plugin WooCommerce 代码问题漏洞	26 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-4047 Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload	26 Dec 202212:28	–	cvelist
NVD	CVE-2022-4047	26 Dec 202213:15	–	nvd
OSV	CVE-2022-4047	26 Dec 202213:15	–	osv
Prion	Design/Logic Flaw	26 Dec 202213:15	–	prion
Positive Technologies	PT-2022-25394 · WordPress · The Return Refund/Exchange For Woocommerce	26 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-4047	23 May 202500:34	–	redhatcve
Vulnrichment	CVE-2022-4047 Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload	26 Dec 202212:28	–	vulnrichment

NVD

Vulners

Node

wpswings return_refund_and_exchange_for_woocommerceRange<4.0.9wordpress

[
  {
    "vendor": "Unknown",
    "product": "Return Refund and Exchange For WooCommerce",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "4.0.9"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94

Parameter	Position	Path	Description	CWE
wps_rma_return_request_order	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via AJAX can upload PHP payloads to execute remote code.
wps_rma_return_request_files[]	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via AJAX can upload PHP payloads to execute remote code.

17 Jun 2026 05:19Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.06152

SSVC