CVE-2023-4216: Orders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/Read
The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the fileurl parameter when importing a CSV file, allowing high privilege users with the managewoocommerce capability to access any file on the web server via a Traversal attack. The content retrieved is however limited to the first line of the file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-4216.
What is the severity of CVE-2023-4216?
The severity of CVE-2023-4216 is low with a severity value of 2.7.
What is the affected software of CVE-2023-4216?
The affected software of CVE-2023-4216 is the Orders Tracking for WooCommerce WordPress plugin before version 1.2.6.
How does CVE-2023-4216 affect high privilege users?
CVE-2023-4216 allows high privilege users with the manage_woocommerce capability to access any file on the web server via a Traversal attack.
Is there a fix available for CVE-2023-4216?
Yes, the fix for CVE-2023-4216 is to update to version 1.2.6 or later of the Orders Tracking for WooCommerce WordPress plugin.