Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4106
HistoryDec 19, 2022 - 2:15 p.m.

Design/Logic Flaw

2022-12-1914:15:00
PRIOn knowledge base
www.prio-n.com
5
wholesale market
woocommerce
unauthenticated access
file download
security flaw

0.002 Low

EPSS

Percentile

60.1%

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.

0.002 Low

EPSS

Percentile

60.1%

Related for PRION:CVE-2022-4106