PT-2022-25394 · WordPress · The Return Refund/Exchange For Woocommerce

Cydave · Published 2022-12-26 · Updated 2023-01-04 · CVE-2022-4047

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Return Refund and Exchange For WooCommerce WordPress plugin versions prior to 4.0.9

Description The issue concerns the lack of validation for attachment files uploaded via an AJAX action. This action is accessible to unauthenticated users, potentially allowing them to upload arbitrary files, including PHP files, which could lead to remote code execution (RCE).

Recommendations For versions prior to 4.0.9, update to version 4.0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the AJAX action until the update is applied.

Exploit

Fix

Related Identifiers

CVE-2022-4047

Affected Products

The Return Refund/Exchange For Woocommerce

References · 3

• 🔥 https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4047 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4047 · Vendor Advisory