WordPress Plugin Vulnerabilities
Product Lister for Walmart <= 1.0.0 - Unauthenticated RCE via Outdated PHPUnit
Description
The plugin uses an outdated PHPUnit library, which is known to be affected by an unauthenticated RCE issue.
February 28th, 2020 - Ticket sent to vendor via https://support.cedcommerce.com/open.php
March 6th, 2020 - Update requested to vendor (also realised that the ticket was closed w/o reason given)
March 12th, 2020 - Ticket closed again w/o explanation
March 12th, 2020 - Issue escalated to WP plugins team
March 18th, 2020 - WP Plugins Team investigating & plugin closed
March 25th, 2020 - Disclosure
Proof of Concept
Affects Plugins
No known fix References
Classification
Type
RCE
OWASP top 10
CWE
CVSS
Miscellaneous
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2020-03-25 (about 6 years ago)
Added
2020-03-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 