Skip to content
Sign in
7.5 High

CVE-2020-36696 The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing…

Description

The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_downloads() function in versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to download files from the vulnerable service.

Affected products and versions

Product Affected versions Fixed in
Product Input Fields for WooCommerce 1.2 earliest → 1.2.6 No fix stated

Other CVEs of Product Input Fields for WooCommerce

The 3 CVEs of Product Input Fields for WooCommerce →
CVE-2024-13359 The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to… 8.1 High CVE-2024-10857 The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up… 6.5 Medium
Track this CVE