Lucene search
Tomasz StaszyszynPATCHSTACK:A2E77DE651FE7D86EFF1A1F2C4D38EDCHistoryNov 10, 2022 - 12:00 a.m.
WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability
2022-11-1000:00:00
Tomasz Staszyszyn
patchstack.com
6
wordpress
s2w
import
shopify
woocommerce
plugin
vulnerability
update
version 1.1.13
patchstack alliance
arbitrary file read
tomasz staszyszyn
0.001 Low
EPSS
Percentile
27.2%
Auth. Arbitrary File Read vulnerability discovered by Tomasz Staszyszyn (Patchstack Alliance) in WordPress S2W – Import Shopify to WooCommerce plugin (versions <= 1.1.12).
Solution
Update the WordPress S2W – Import Shopify to WooCommerce plugin to the latest available version (at least 1.1.13).
| CPE | Name | Operator | Version |
|---|---|---|---|
| s2w – import shopify to woocommerce | le | 1.1.12 |
Related
cvelist
cvelist
prion
prion
Arbitrary file deletion
2022-11-18 23:15:00
wpvulndb
wpvulndb
S2W - Import Shopify to WooCommerce < 1.1.13 - Admin+ Arbitrary File Access
2022-11-10 00:00:00
cve
cve
CVE-2022-44634
2022-11-18 23:15:28
nvd
nvd
CVE-2022-44634
2022-11-18 23:15:28