CVE-2018-21007

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-29

Last modified

2024-08-05

Weaknesses

CWE-284

Affected products

• User Email Verification For Woocommerce (Wisetr)

References

• https://wordpress.org/plugins/woo-confirmation-email/#developers
• https://wpvulndb.com/vulnerabilities/9847