Vendor
Ex-Themes
9 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.1
WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite
The WooEvents - Calendar and Event Booking plugin for WordPress is vulnerable to arbitrary file overwrite due to insufficient file path validation in the inc/barcode.php file in all versions up to, and including, 4.1.2. This makes it possible for unauthentica…