Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download
high
The Woocommerce Product Design plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
- CVSS:
- 7.5
- Affected:
- up to 1.0.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 29, 2024
CVE-2024-50508 on NVD →
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Deletion
critical
The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution...
- CVSS:
- 9.8
- Affected:
- up to 1.0.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 28, 2024
CVE-2024-50509 on NVD →
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
critical
The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution p...
- CVSS:
- 9.8
- Affected:
- up to 1.0.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 25, 2024
CVE-2024-50482 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database