Skip to content
OpenAdvisories
Medium · 6.6 CVE-2024-47309 EUVD-2024-42345GHSA-5whh-ghff-g6gr

WordPress Cities Shipping Zones for WooCommerce plugin <= 1.2.7 - Local File Inclusion vulnerability

Published Oct 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Condless Cities Shipping Zones for WooCommerce cities-shipping-zones-for-woocommerce allows PHP Local File Inclusion.This issue affects Cities Shipping Zones for WooCommerce: from n/a through <= 1.2.7.

Affected products

VendorProductAffectedFixed
Condless Cities Shipping Zones for WooCommerce ≤ 1.2.7 —

References