CVE-2024-10828CWE-502

Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details

High · published November 13, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01459 · 73.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-11-13T03:20Z
EPSS history
Timeline
  • 13 NOV 03:20Z
    Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details
    cvelistv5