MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders. vulnerabilities
1 known vulnerability in MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders. from Mulika. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
MIPL Multistore Sync for WooCommerce. Sync…: Improper Limitation of a Pathname to a Restricted Directory
The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary