Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Product Addons Fields for WooCommerce Same Origin Method Execution (SOME) - CVE-2016-4566 - Vulnerability Database
WP Plugin Woocommerce Product Addon

WordPress Plugin Product Addons Fields for WooCommerce Same Origin Method Execution (SOME) - CVE-2016-4566

Medium
Reference: CVE-2016-4566
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-4566
Title: WordPress Plugin Product Addons Fields for WooCommerce Same Origin Method Execution (SOME)
Overview:

WordPress Plugin Product Addons Fields for WooCommerce is prone to same origin method execution (SOME) vulnerability. The impact of a SOME attack is similar to the impact of cross-site scripting though there are some important and distinguishing exploitation restrictions. An attacker may leverage this issue to hijack dangerous web functionality and even exfiltrate sensitive user data. WordPress Plugin Product Addons Fields for WooCommerce version 14.0 is vulnerable prior versions may also be affected.