CVE-2022-42497 - WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability

CRITICAL

WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability

Published Nov 18, 2022

10.0

CRITICAL

CVSS 3.1

EPSS 1.17%

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
<= 1.1.0	affected	<=1.1.0

Vendor solution

Update to 1.2.0 or higher version.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://patchstack.com/database/vulnerability/api2cart-bridge-connector/wordpress-api2cart-bridge-connector-plugin-1-1-0-arbitrary-code-execution-vulnerability?_s_id=cve		Third Party Advisory
https://wordpress.org/plugins/api2cart-bridge-connector/#developers		Release NotesThird Party Advisory