WordPress WooCommerce Refund And Exchange with RMA plugin <= 3.2.6 - Unauthenticated Arbitrary File Upload vulnerability

🗓️ 18 Jul 2025 04:17:04Reported by WordFenceType

patchstack

patchstack🔗 patchstack.com👁 3 Views

WordPress WooCommerce Refund And Exchange plugin <= 3.2.6 allows Arbitrary File Upload vulnerability.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-6222	18 Jul 202509:09	–	circl
CNNVD	WordPress plugin WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet 代码问题漏洞	18 Jul 202500:00	–	cnnvd
CVE	CVE-2025-6222	18 Jul 202505:23	–	cve
Cvelist	CVE-2025-6222 WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload	18 Jul 202505:23	–	cvelist
EUVD	EUVD-2025-21855	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6222	18 Jul 202506:15	–	nvd
Positive Technologies	PT-2025-29999 · WordPress · Woocommerce Refund/Exchange With Rma - Warranty Management	18 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6222	20 Jul 202506:02	–	redhatcve
Vulnrichment	CVE-2025-6222 WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet <= 3.2.6 - Unauthenticated Arbitrary File Upload	18 Jul 202505:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)	24 Jul 202514:26	–	wordfence

Vulners

Node

wordpress woocommerce_refund_and_exchange_with_rmaRange≤3.2.6

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-refund-and-exchange/woocommerce-refund-and-exchange-with-rma-warranty-management-refund-policy-manage-user-wallet-326-unauthenticated-arbitrary-file-upload

18 Jul 2025 04:17Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19.8

EPSS0.01416

SSVC

woocommerce plugin arbitrary file upload vulnerability fix high severity unauthenticated access wordfence cve-2025-6222