Arbitrary file deletion

2022-11-1823:15:00

PRIOn knowledge base

www.prio-n.com

wordpress

file deletion

auth vulnerability

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

Auth. (admin+) Arbitrary File Read vulnerability in S2W – Import Shopify to WooCommerce plugin <= 1.1.12 on WordPress.

CPENameOperatorVersion
s2w_-_import_shopify_to_woocommercele1.1.12

CPE	Name	Operator	Version
	s2w_-_import_shopify_to_woocommerce	le	1.1.12

References

patchstack.com/database/vulnerability/import-shopify-to-woocommerce/wordpress-s2w-import-shopify-to-woocommerce-plugin-1-1-12-auth-local-file-inclusion-lfi-vulnerability?_s_id=cve

wordpress.org/plugins/import-shopify-to-woocommerce/