CVE-2022-3537 - Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload

Back Back to CVE browser

HIGH

Role Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File Upload

Published Nov 7, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.54%

Description

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP

Affected products

Vendor n/a Product Role Based Pricing for WooCommerce Default
n/a
- Version
  1.6.2
  Status
  affected
  Constraints
  <1.6.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Role Based Pricing for WooCommerce

n/a

Version	Status	Constraints
1.6.2	affected	<1.6.2

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-434

Unrestricted Upload of File

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42903
Advisory
https://wpscan.com/vulnerability/696868f7-409d-422d-87f4-92fc6bf6e74e
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42903		Advisory
https://wpscan.com/vulnerability/696868f7-409d-422d-87f4-92fc6bf6e74e		ExploitThird Party Advisory