Skip to content
OpenAdvisories

Vendor

vanquish

22 known vulnerabilities.

Products

WooCommerce Support Ticket System 5 User Extra Fields 4 WordPress User Extra Fields 4 WooCommerce Orders & Customers Exporter 3 Upload Files Anywhere 2 WooCommerce File Approval 1 WooCommerce Order Details 1 WooCommerce Customers Manager 1 WooCommerce Bulk Product Editor 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-11150

    WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion

    The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 16.6. This makes it possible for unauthenti…

    vanquish WordPress User Extra Fields Web / CMS
  • Critical 9.8
    CVE-2024-10801

    WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload

    The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 16.5. This makes it possible for unauthentic…

    vanquish WordPress User Extra Fields Web / CMS
  • Critical 9.8
    CVE-2024-10627

    WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload

    The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 17.7. This makes it possible for unaut…

    vanquish WooCommerce Support Ticket System Web / CMS
  • Critical 9.8
    CVE-2024-10625

    WooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Deletion

    The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for unau…

    vanquish WooCommerce Support Ticket System Web / CMS