Exploit for CVE-2024-50509

🗓️ 16 Dec 2024 19:17:07Reported by RandomRobbieBFType

githubexploit

githubexploit🔗 github.com👁 72 Views

Unauthenticated file deletion in Woocommerce Product Design up to 1.0.0 enabling code execution.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Woocommerce Product Design plugin of the WordPress content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain access to read, modify, or delete data.	13 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-50509	30 Oct 202410:00	–	circl
CNNVD	WordPress plugin Woocommerce Product Design 路径遍历漏洞	30 Oct 202400:00	–	cnnvd
CVE	CVE-2024-50509	30 Oct 202407:41	–	cve
Cvelist	CVE-2024-50509 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability	30 Oct 202407:41	–	cvelist
NVD	CVE-2024-50509	30 Oct 202408:15	–	nvd
Patchstack	WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability	28 Oct 202410:29	–	patchstack
Patchstack	WordPress Woocommerce Product Design Plugin <= 1.0.0 is vulnerable to Arbitrary File Deletion	28 Oct 202400:00	–	patchstack
Positive Technologies	PT-2024-10047 · WordPress · Woocommerce Product Design	24 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-50509	5 Feb 202506:51	–	redhatcve

17 Dec 2024 11:02Current

9.9High risk

Vulners AI Score9.9

CVSS 3.18.6

EPSS0.01296

SSVC

woocommerce product design arbitrary file deletion unauthenticated access version 1.0.0 code execution