Lucene search
PRIOn knowledge basePRION:CVE-2022-4109HistoryJan 02, 2023 - 10:15 p.m.
Path traversal
2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
1
woocommerce
wordpress
path traversal
security vulnerability
admin access
server logs
The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users such as admin to download arbitrary logs from the server even when they should not be able to (for example in multisite)
| CPE | Name | Operator | Version |
|---|---|---|---|
| wholesale_market_for_woocommerce | lt | 2.0.0 |
Related
cve
cve
CVE-2022-4109
2023-01-02 22:15:16
nvd
nvd
CVE-2022-4109
2023-01-02 22:15:16
wpvulndb
wpvulndb
Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download
2022-12-12 00:00:00
wpexploit
wpexploit
Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download
2022-12-12 00:00:00
cvelist
cvelist