Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
36Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 7.5epss 2.2%
probabilidade de exploração
2.2%top 19% das CVEs
exploração observada
nãonenhuma fonte reporta
The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
hippooo · Hippoo Mobile App for WooCommerce