CVE-2022-42497

The CVE-2022-42497 entry concerns the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The attacked component is the plugin’s code path that enables Arbitrary Code Execution. Public sources indicate the vulnerability can be triggered to execute code on affected sites (some reference...

CVE-2022-42698

CVE-2022-42698 affects the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The root cause is an unauthenticated Arbitrary File Upload due to insufficient input/file validation in the plugin, enabling an attacker to upload arbitrary files via the vulnerable endpoint. Impact is high:...