Role Based Pricing for WooCommerce vulnerabilities
We track 2 vulnerabilities in Role Based Pricing for WooCommerce products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2022.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Role Based Pricing for WooCommerce vulnerabilities
- 8.8 High severity
Role Based Pricing for WooCommerce: Cross-Site Request Forgery
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP
- 8.8 High severity
Role Based Pricing for WooCommerce: Cross-Site Request Forgery
The Role Based Pricing for WooCommerce WordPress plugin before 1.6.3 does not have authorisation and proper CSRF checks, as well as does not validate path given via user input, allowing any authenticated users like subscriber to perform PHAR deserialization at