Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbChloe ChamberlandWPVDB-ID:9B73D8FA-F7AE-4516-BD57-269C4981439F
HistoryJun 14, 2021 - 12:00 a.m.

Woocommerce Stock Manager < 2.6.0 - CSRF to Arbitrary File Upload

2021-06-1400:00:00
Chloe Chamberland
wpscan.com
10

0.002 Low

EPSS

Percentile

56.8%

JSON

The plugin is vulnerable to CSRF leading to Arbitrary File Upload due to missing nonce and file validation in the /admin/views/import-export.php file.

PoC

File will upload to: /wp-content/plugins/woocommerce-stock-manager/admin/views/upload/PoC.php

CPENameOperatorVersion
woocommerce-stock-managerlt2.6.0

Related

cnvd 1
cvelist 1
nvd 1
cve 1
prion 1
wpexploit 1
patchstack 1
cnvd
cnvd
WordPress Cross-site Request Forgery Vulnerability (CNVD-2021-59587)
2021-07-27 00:00:00
cvelist
cvelist
CVE-2021-34619 Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin
2021-06-14 00:00:00
nvd
nvd
CVE-2021-34619
2021-07-21 15:16:20
cve
cve
CVE-2021-34619
2021-07-21 15:16:20
prion
prion
Cross site request forgery (csrf)
2021-07-21 15:16:00
wpexploit
wpexploit
Woocommerce Stock Manager < 2.6.0 - CSRF to Arbitrary File Upload
2021-06-14 00:00:00
patchstack
patchstack
WordPress WooCommerce Stock Manager plugin <= 2.5.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary File Upload
2021-06-14 00:00:00

0.002 Low

EPSS

Percentile

56.8%

JSON
Related for WPVDB-ID:9B73D8FA-F7AE-4516-BD57-269C4981439F
cnvd1cvelist1nvd1cve1prion1wpexploit1patchstack1