← Back to browse · API

CVE-2022-4328

Severity
CRITICAL
CVSS
9.8
EPSS
0.04427
Risk score
40.75
CISA KEV
No
PoC
No
Published
2023-03-06
Modified
2025-03-04
First seen
2026-08-07
Aliases
EUVD-2022-51681, GHSA-MQR5-JG85-4HVX
Products
Unknown:WooCommerce Checkout Field Manager 0 <18.0
Sources
euvd EUVD-2022-51681

Description

The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

References