48 matches found
CVE-2019-11807: Unrestricted Upload of File with Dangerous Type
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
PT-2019-12497
Name of the Vulnerable Software and Affected Versions WooCommerce Checkout Manager plugin versions prior to 4.3 Description The issue allows media deletion due to a lack of capabilities checks and a nopriv registration. This can be exploited via the "wp-admin/admin-ajax.php?action=update attachme...
WordPress WooCommerce Checkout Manager Plugin Arbitrary File Upload
An Arbitrary File Upload vulnerability exists in WordPress WooCommerce Checkout Manager Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WooCommerce Checkout Manager Plugin for WordPress < 4.3 Arbitrary File Upload
The WordPress WooCommerce Checkout Manager Plugin installed on the remote host is affected by an arbitrary file upload vulnerability. An unauthenticated, remote attacker can leverage this issue to escalate privileges and execute arbitrary code on the affected host. Note that the scanner has not...
Users Urged to Update WordPress Plugin After Flaw Disclosed
UPDATE A vulnerability in a popular WordPress plugin called the WooCommerce Checkout Manager extension is potentially putting more than 60,000 websites at risk, researchers say. The WooCommerce Checkout Manager plugin allows WooCommerce users to customize and manage the fields on their checkout...
Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension
If you own an eCommerce website built on WordPress and powered by WooCommerce plugin, then beware of a new, unpatched vulnerability that has been made public and could allow attackers to compromise your online store. A WordPress security company—called "Plugin Vulnerabilities "—that recently gone...
WordPress WooCommerce Checkout Manager plugin 4.2.6 (latest) - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability found in WordPress WooCommerce Checkout Manager plugin version 4.2.6. Solution 26 April 2019 - no patched version available...
