Security News > 2018 > November > WordPress Flaw Opens Millions of WooCommerce Shops to Takeover

WordPress Flaw Opens Millions of WooCommerce Shops to Takeover

2018-11-07 16:33

A file delete vulnerability in WordPress can be elevated into a remote code execution vulnerability for plugins like WooCommerce.

News URL

https://threatpost.com/wordpress-flaw-opens-millions-of-woocommerce-shops-to-takeover/138861/

#takeover #wordpress

Related news

Premium WordPress 'Motors' theme vulnerable to admin takeover attacks (source)
Flawed WordPress theme may allow admin account takeover on 22,000+ sites (CVE-2025-4322) (source)

Related vendor

VENDOR	LAST 12M	#/PRODUCTS	LOW	MEDIUM	HIGH	CRITICAL	TOTAL VULNS
Wordpress		7	2	93	44	18	157
Woocommerce		32	0	42	21	3	66

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.