Skip to content
OpenAdvisories
High · 7.6 CVE-2023-35881 EUVD-2023-39874GHSA-9pwv-pqg3-7wh4

WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: woocommerce Product: WooCommerce One Page Checkout Category: Web / CMS

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WooCommerce WooCommerce One Page Checkout allows PHP Local File Inclusion.This issue affects WooCommerce One Page Checkout: from n/a through 2.3.0.

Affected products

VendorProductAffectedFixed
WooCommerce WooCommerce One Page Checkout ≤ 2.3.0 —

References