← Volver a CVEs
CVE-2018-21007
N/ADescripcion
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado8/29/2019
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
wisetr:user_email_verification_for_woocommerce
Debilidades (CWE)
CWE-284
Referencias
https://wpvulndb.com/vulnerabilities/9847(cve@mitre.org)
https://wordpress.org/plugins/woo-confirmation-email/#developers(af854a3a-2127-422b-91ae-364da2661108)
https://wpvulndb.com/vulnerabilities/9847(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.