WPC Smart Messages for WooCommerce vulnerabilities
1 known vulnerability in WPC Smart Messages for WooCommerce from Wpclever. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
WPC Smart Messages for WooCommerce: Improper Control of Filename for Include/Require Statement in PHP Program
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.1 via the get_condition_value function. This makes it possible for authenticated attackers, with Subscriber-level access