0.001 Low
EPSS
Percentile
34.6%
Attackers in control of a user with the shop manager role can delete certain files on the server and then take over any victim account.
blog.ripstech.com/2018/wordpress-design-flaw-leads-to-woocommerce-rce/
woocommerce.wordpress.com/2018/10/11/woocommerce-3-4-6-security-fix-release-notes/
www.ripstech.com/php-security-calendar-2018/