Facturaone Para Woocommerce Con Verifactu

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-14289 CRITICAL POC PATCH Act Now

Remote code execution in FacturaONE for WooCommerce plugin before version 5.37 allows unauthenticated attackers to write arbitrary files to a web-accessible directory and achieve code execution, because a request handler relies on an empty default cryptographic key and lacks authentication. Public exploit code is available.

Code Injection RCE WordPress Facturaone Para Woocommerce Con Verifactu

NVD WPScan

CVSS 3.1

9.0

EPSS

0.4%

CVE-2026-14289

EPSS 0% CVSS 9.0

CRITICAL POC PATCH Act Now

Remote code execution in FacturaONE for WooCommerce plugin before version 5.37 allows unauthenticated attackers to write arbitrary files to a web-accessible directory and achieve code execution, because a request handler relies on an empty default cryptographic key and lacks authentication. Public exploit code is available.

Code Injection RCE WordPress +1

NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy