Vulnerabilities > CVE-2024-35634 - Unspecified vulnerability in Wow-Company Woocommerce - Recent Purchases 1.0.1

047910
CVSS 4.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
wow-company

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wow-Company Woocommerce – Recent Purchases allows PHP Local File Inclusion.This issue affects Woocommerce – Recent Purchases: from n/a through 1.0.1.

Vulnerable Configurations

Part Description Count
Application
Wow-Company
2