9.9
Critical
CVE-2023-33318 Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo:…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AutomateWoo 4.9 | earliest → 4.9.40 | No fix stated |
Other CVEs of AutomateWoo
The 5 CVEs of AutomateWoo →
CVE-2023-32743
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce…
7.6
High
CVE-2023-33330
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce…
8.5
High
CVE-2023-32745
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions
5.4
Medium
CVE-2023-36513
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions
5.4
Medium