WordPress Checkout Field Editor for WooCommerce plugin <= 1.7.2 - Auth PHP Object Injection vulnerability

2022-11-0700:00:00

Nguyen Duy Quoc Khanh

patchstack.com

wordpress

checkout field editor

woocommerce

vulnerability

php object injection

nguyen duy quoc khanh

update

0.001 Low

EPSS

Percentile

43.1%

JSON

Auth PHP Object Injection vulnerability discovered by Nguyen Duy Quoc Khanh in WordPress Checkout Field Editor for WooCommerce plugin (versions <= 1.7.2).

Solution

           Update the WordPress Checkout Field Editor (Checkout Manager) for WooCommerce plugin to the latest available version (at least 1.8.0).

CPENameOperatorVersion
checkout field editor (checkout manager) for woocommercele1.7.2

CPE	Name	Operator	Version
	checkout field editor (checkout manager) for woocommerce	le	1.7.2

References

wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136

0.001 Low

EPSS

Percentile

43.1%

JSON

Related for PATCHSTACK:F4203F49770120155553C69FCF0C947A