Lucene search
PRIOn knowledge basePRION:CVE-2018-20714HistoryJan 15, 2019 - 4:29 p.m.
Arbitrary file deletion
2019-01-1516:29:00
PRIOn knowledge base
www.prio-n.com
2
The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allows deletion of woocommerce.php, which leads to certain privilege checks not being in place, and therefore a shop manager can escalate privileges to admin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce | lt | 3.4.6 |
Related
openvas
openvas
WordPress WooCommerce Plugin < 3.4.6 RCE Vulnerability
2018-11-13 00:00:00
WordPress WooCommerce Plugin RCE Vulnerability - Windows
2018-11-13 00:00:00
cve
cve
CVE-2018-20714
2019-01-15 16:29:00
nvd
nvd
CVE-2018-20714
2019-01-15 16:29:00
wpvulndb
wpvulndb
WooCommerce <= 3.4.5 - Authenticated File Deletion to Privilege Escalation
2018-10-11 00:00:00
veracode
veracode
Directory Traversal
2019-01-16 07:34:44
cvelist
cvelist
CVE-2018-20714
2019-01-15 16:00:00
osv
osv
CVE-2018-20714
2019-01-15 16:29:00