CVE-2022-4107

The CVE-2022-4107 issue affects the WordPress SMSA Shipping for WooCommerce plugin prior to version 1.0.5. Affected functionality allows authenticated users (e.g., subscribers) to download arbitrary server files due to missing authorization checks, CSRF protection, and file validation. Consequenc...