55 matches found
Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls
The plugin does not have authorisation and proper CSRF checks in multiple AJAX actions, allowing users with a role as low as subscriber to call them. One action in particular could allow to update arbitrary options PoC To set the default role for new users to administrator, run the below command ...
Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls
The plugin does not have authorisation and proper CSRF checks in multiple AJAX actions, allowing users with a role as low as subscriber to call them. One action in particular could allow to update arbitrary options To set the default role for new users to administrator, run the below command in t...
The vulnerability lies in the implementation of the /woocommerce-stock-manager/trunk/admin/views/import-export.php function, which handles import/export operations for the WooCommerce Stock Manager plugin. This plugin is a content management system for WordPress websites. An attacker can exploit this vulnerability to perform a CSRF attack.
The vulnerability in the implementation of the /woocommerce-stock-manager/trunk/admin/views/import-export.php function, which handles plugin imports/exports for the WooCommerce Stock Manager content management system for WordPress, relates to unlimited loading of dangerous files. Exploiting this...
WordPress Cross-site Request Forgery Vulnerability (CNVD-2021-59587)
WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers.A cross-site request forgery vulnerability exists in the WooCommerce Stock Manager WordPress plugin,...
CVE-2021-34619
The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file...
CVE-2021-34619 Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin
The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file...
CVE-2021-34619
The CVE-2021-34619 issue affects the WordPress WooCommerce Stock Manager plugin up to version 2.5.7, where the import-export.php path lacks nonce handling and file validation, enabling Cross-Site Request Forgery that can lead to Arbitrary File Upload. Impact is high (potential code upload and exe...
WordPress 跨站请求伪造漏洞
WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers.A cross-site request forgery vulnerability exists in the WooCommerce Stock Manager WordPress plugin,...
WooCommerce Stock Manager Plugin for WordPress < 2.6.0 Cross-Site Request Forgery
The WordPress WooCommerce Stock Manager Plugin installed on the remote host is affected by a Cross-Site Request Forgery CSRF vulnerability that could lead to an arbitrary file upload. Note that the scanner has not tested for these issues but has instead relied only on the application's...
Woocommerce Stock Manager < 2.6.0 - CSRF to Arbitrary File Upload
The plugin is vulnerable to CSRF leading to Arbitrary File Upload due to missing nonce and file validation in the /admin/views/import-export.php file. PoC File will upload to: /wp-content/plugins/woocommerce-stock-manager/admin/views/upload/PoC.php...
Woocommerce Stock Manager < 2.6.0 - CSRF to Arbitrary File Upload
The plugin is vulnerable to CSRF leading to Arbitrary File Upload due to missing nonce and file validation in the /admin/views/import-export.php file. File will upload to: /wp-content/plugins/woocommerce-stock-manager/admin/views/upload/PoC.php history.pushState'', '', '/' function submitRequest...
WordPress WooCommerce Stock Manager plugin <= 2.5.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary File Upload
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload discovered by Chloe Chamberland WordFence in WordPress WooCommerce Stock Manager plugin versions = 2.5.7. Solution Update the WordPress WooCommerce Stock Manager plugin to the latest available version at least 2.6.0...
PT-2021-3982 · WordPress · Woocommerce Stock Manager
Name of the Vulnerable Software and Affected Versions: WooCommerce Stock Manager versions up to, and including, 2.5.7 Description: The issue is related to the implementation of the import/export functionality in the WooCommerce Stock Manager plugin for WordPress, specifically in the...
WordPress WooCommerce Stock Manager Plugin <= 1.0.7 - Authenticated Product Settings Change Vulnerability
In the function function stockmanagersaveoneproductstockdata, doesn't check for user capabilities so any logged in user can change the settings. Solution Update the plugin...