Woo Confirmation Email < 3.2.0 - Missing Access Controls to View Uploaded files

Affects Plugin

References

CVE 2018-21007

Classification

Type AUTHBYPASS
OWASP Top 10 A2: Broken Authentication and Session Management
CWE CWE-287

Miscellaneous

Views 938
Verified No
WPVDB ID 9847

Timeline

Publicly Published 2018-11-27 (over 1 year ago)
Added 2019-08-29 (9 months ago)
Last Updated 2019-11-28 (6 months ago)

Our Other Services

Online WordPress Vulnerability Scanner WPScan WordPress Security Plugin