Skip to main content

Woocommerce Checkout Manager

1 CVEs product

Monthly

CVE-2019-11807 May 06, 18:29 HIGH POC This Week

The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update_attachment_wccm wccm_default_keys_load parameter because of a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress File Upload Woocommerce Checkout Manager Visser
NVD
CVSS 3.0
7.5
EPSS
1.5%
EPSS 1% CVSS 7.5
HIGH POC This Week

The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update_attachment_wccm wccm_default_keys_load parameter because of a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress File Upload +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy