Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-4047
HistoryDec 26, 2022 - 1:15 p.m.

Design/Logic Flaw

2022-12-2613:15:00
PRIOn knowledge base
www.prio-n.com
14
security flaw
woocommerce
wordpress
rce
validation
ajax

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

JSON

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE

Related

cve 1
wpvulndb 1
cvelist 1
wpexploit 1
nvd 1
githubexploit 1
cve
cve
CVE-2022-4047
2022-12-26 13:15:12
wpvulndb
wpvulndb
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
2022-12-05 00:00:00
cvelist
cvelist
CVE-2022-4047 Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
2022-12-26 12:28:13
wpexploit
wpexploit
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
2022-12-05 00:00:00
nvd
nvd
CVE-2022-4047
2022-12-26 13:15:12
githubexploit
githubexploit
Exploit for CVE-2022-4047
2023-12-14 07:36:01

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

JSON
Related for PRION:CVE-2022-4047
cve1wpvulndb1cvelist1wpexploit1nvd1githubexploit1