Ni Purchase Order(PO) For WooCommerce vulnerabilities
We track 1 vulnerability in Ni Purchase Order(PO) For WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2024.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Ni Purchase Order(PO) For WooCommerce vulnerabilities
- 7.2 High severity
Ni Purchase Order(PO) For WooCommerce: Unrestricted Upload of File with Dangerous Type
The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web server, triggering an RCE vulnerability by up