CVE-2024-39651

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Arbitrary File Deletion

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-39651 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 7c83b156fb00 Credits Dave Jong Patchsta...