vanquish

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

vanquish records in CISA KEV

No vanquish vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Customers Manager 7 records HIGH Woocommerce Support Ticket System 4 records MEDIUM User Extra Fields 2 records MEDIUM Woocommerce Upload Files 2 records MEDIUM

Records

2 records in Woocommerce Upload Files · all components

TI-2024-10031 CVE-2024-10820 · GHSA-q46h-crrj-ggjm

WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload

MEDIUM 51

The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 84.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01207 Published 2024-11-13 No fix listed CWE-434

TI-2021-06463 CVE-2021-24171 · GHSA-73q3-2843-4j2x

WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload

MEDIUM 46

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01899 Published 2021-04-05 Fixed in 59.4 CWE-434

Open these records in search →

Critical	6
High	17
Medium	7
Low	0
No CVSS	0