Free Trial

CVE-2022-45359 : YITH WOOCOMMERCE GIFT CARDS PREMIUM PLUGIN UP TO 3.19.0 ON WORDPRESS UNRESTRICTED UPLOAD

Description

Unauth. Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards premium plugin <= 3.19.0 on WordPress.

References

https://patchstack.com/database/vulnerability/yith-woocommerce-gift-cards-premium/wordpress-yith-woocommerce-gift-cards-premium-plugin-3-19-0-unauth-arbitrary-file-upload-vulnerability?_s_id=cve

For More Information

MITRE

Common Vulnerabilityies and Exposures

CVE-2022-45359 : YITH WOOCOMMERCE GIFT CARDS PREMIUM PLUGIN UP TO 3.19.0 ON WORDPRESS UNRESTRICTED UPLOAD
CVE-2022-45359 : YITH WOOCOMMERCE GIFT CARDS PREMIUM PLUGIN UP TO 3.19.0 ON WORDPRESS UNRESTRICTED UPLOAD

Contact us to get started

CVE-2023-0556 : CONTENTSTUDIO PLUGIN UP TO 1.2.5 ON WORDPRESS CSTU_GET_METADATA AUTHORIZATION

CVE-2023-0556 : CONTENTSTUDIO PLUGIN UP TO 1.2.5 ON WORDPRESS CSTU_GET_METADATA AUTHORIZATION

Description The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions

Learn more
CVE-2022-48108 : D-LINK DIR-878 1.30B08 SUBNETMASK COMMAND INJECTION

CVE-2022-48108 : D-LINK DIR-878 1.30B08 SUBNETMASK COMMAND INJECTION

Description D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to

Learn more
CVE-2022-47767 : SOLAR-LOG GATEWAY UP TO 4.2.7/5.1.1 SLCORE BACKDOOR

CVE-2022-47767 : SOLAR-LOG GATEWAY UP TO 4.2.7/5.1.1 SLCORE BACKDOOR

Description A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.

Learn more