Skip to content
OpenAdvisories

Vendor

aramex

1 known vulnerabilities.

Products

Aramex Shipping WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6566

    Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure

    The Aramex Shipping WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.21. This is due the plugin not preventing direct access to the composer-setup.php file which also has display_errors enabled. …

    aramex Aramex Shipping WooCommerce Web / CMS