Wisecampaign Woocommerce Conversions Made Easy
Monthly
Unauthenticated REST API access in the wiseCampaign - WooCommerce Conversions Made Easy WordPress plugin (all versions through 1.1.16) allows any network attacker to read and overwrite the plugin's banner, stockbar, and core settings, and to upload arbitrary background image files via wp_handle_upload(), with zero authentication or nonce validation. Every REST endpoint the plugin registers uses the blanket permission callback '__return_true', which bypasses WordPress's built-in capability and nonce checks entirely. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated, low-complexity attack surface makes this straightforward to exploit opportunistically.
Unauthenticated REST API access in the wiseCampaign - WooCommerce Conversions Made Easy WordPress plugin (all versions through 1.1.16) allows any network attacker to read and overwrite the plugin's banner, stockbar, and core settings, and to upload arbitrary background image files via wp_handle_upload(), with zero authentication or nonce validation. Every REST endpoint the plugin registers uses the blanket permission callback '__return_true', which bypasses WordPress's built-in capability and nonce checks entirely. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated, low-complexity attack surface makes this straightforward to exploit opportunistically.