CVE-2022-4107 | BDVDB-2026-190992 Detail

Description#

The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not validate the file to be downloaded, allowing any authenticated users, such as subscriber to download arbitrary file from the server

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-12-19Record published in the CVE List.
2. Version 22025-04-14Most recent update recorded in the CVE List.