WordPress Plugin Vulnerabilities

Revamp CRM for WooCommerce <= 1.0.3 - LFI

Description

The Revamp CRM for WooCommerce WordPress plugin was affected by a LFI security vulnerability.

Affects Plugins

Plugin icon
revampcrm-woocommerce
Fixed in 1.0.4

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2103958%40revampcrm-woocommerce&old=2102983%40revampcrm-woocommerce

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
db4a1638-27b7-4cd7-8bb9-fe79932007b5

Timeline

Publicly Published
2019-06-11 (about 6 years ago)
Added
2019-06-24 (about 6 years ago)
Last Updated
2019-06-24 (about 6 years ago)

Other

Published
Title
Published
2014-09-17
Title
WP Content Source Control < 3.1.1 - Path Traversal
Published
2019-01-16
Title
Shortcode Factory < 2.8 - Local File Inclusion
Published
2024-10-15
Title
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
Published
2026-01-13
Title
Integration Opvius AI for WooCommerce <= 1.3.0 - Unauthenticated Arbitrary File Deletion/Read via Path Traversal
Published
2016-03-21
Title
ABtest - File Inclusion