CVE-2022-4109

Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download

Low · published January 2, 2023

CVSS v3.1
2.7
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users such as admin to download arbitrary logs from the server even when they should not be able to (for example in multisite)

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Published
2023-01-02T21:49Z
EPSS history
Timeline
  • 02 JAN 21:49Z
    Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download
    cvelistv5