Unrestricted file upload

2024-01-2412:15:00

PRIOn knowledge base

www.prio-n.com

file upload

dangerous type

webtoffee

order export

order import

woocommerce

vulnerability

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.3.

CPENameOperatorVersion
order_export_\\&_order_import_for_woocommercelt2.4.4

CPE	Name	Operator	Version
	order_export_\\&_order_import_for_woocommerce	lt	2.4.4

References

patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-3-arbitrary-file-upload-vulnerability?_s_id=cve