eMagicOne Store Manager for WooCommerce vulnerabilities
4 known vulnerabilities in eMagicOne Store Manager for WooCommerce from eMagicOne. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
eMagicOne Store Manager for WooCommerce: Unrestricted Upload of File with Dangerous Type
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated att
- 9.1 Critical severity
eMagicOne Store Manager for WooCommerce: External Control of File Name or Path
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthentic
- 7.5 High severity
eMagicOne Store Manager for WooCommerce: External Control of File Name or Path
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions up to, and including, 1.2.5 via the get_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitra
- 9.8 Critical severity
eMagicOne Store Manager for WooCommerce: Unrestricted Upload of File with Dangerous Type
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated atta