Design/Logic Flaw

2019-08-2912:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.

CPENameOperatorVersion
user_email_verification_for_woocommercelt3.2.0

CPE	Name	Operator	Version
	user_email_verification_for_woocommerce	lt	3.2.0

References

wordpress.org/plugins/woo-confirmation-email/

wpvulndb.com/vulnerabilities/9847