WordPress Plugin Vulnerabilities

WooCommerce Checkout Manager <= 4.2.6 - Arbitrary File Upload

Description

The Checkout Manager for WooCommerce WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
woocommerce-checkout-manager
Fixed in 4.3

References

CVE
CVE-2019-11807
URL
https://thehackernews.com/2019/04/wordpress-woocommerce-security.html
URL
https://plugins.trac.wordpress.org/changeset/2075661/woocommerce-checkout-manager
URL
https://www.wordfence.com/blog/2019/05/unauthenticated-media-deletion-vulnerability-patched-in-woocommerce-checkout-manager-plugin/

Miscellaneous

Submitter
Ryan Dewhurst
Submitter website
https://wpscan.io
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
36aed820-df7f-4b0f-9610-af397009d429

Timeline

Publicly Published
2019-04-25 (about 4 years ago)
Added
2019-04-26 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2023-09-26
Title
Welcart e-Commerce < 2.8.22 - Editor+ Arbitrary File Upload
Published
2014-08-01
Title
LB Mixed Slideshow 1.0 - Arbitrary File Upload
Published
2021-04-10
Title
Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE
Published
2014-08-01
Title
Fancy Gallery 1.2.4 - Shell Upload
Published
2022-08-11
Title
Uploading SVG, WEBP and ICO files <= 1.2.1 - Admin+ Arbitrary File Upload