CVE-2024-12861

The CVE CVE-2024-12861 affects the WordPress plugin "W2S – Migrate WooCommerce to Shopify". It allows an authenticated user with Subscriber-level access or higher to read arbitrary files on the server via the viw2s_view_log AJAX action, for all versions up to and including 1.2.1. This exposes pot...

WordPress W2S – Migrate WooCommerce to Shopify plugin <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Read vulnerability discovered by Stiofan in WordPress Plugin W2S – Migrate WooCommerce to Shopify versions = 1.2.1...