Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WooCommerce Object Injection - Vulnerability Database
WP Plugin Woocommerce

WordPress Plugin WooCommerce Object Injection

Medium
Reference: No Reference
Title: WordPress Plugin WooCommerce Object Injection
Overview:

WordPress Plugin WooCommerce is prone to a vulnerability that lets remote attackers inject arbitrary code because the application fails to sanitize user-supplied input before being passed to the maybe_unserialize() function. Attackers can possibly exploit this issue to download any file on the vulnerable server. WordPress Plugin WooCommerce version 2.3.10 is vulnerable prior versions may also be affected.