Conversation

"WooCommerce Checkout Manager" plugin for WooCommerce (WordPress), used by 60,000+ websites, vulnerable to arbitrary file uploads:

https://thehackernews.com/2019/04/wordpress-woocommerce-security.html

– the latest version of WooCommerce Checkout Manager (4.2.6) is still vulnerable to this
– there is no patch available
– mitigation: disable the "Categorize Uploaded Files" option in the setting, or disable the plugin completely

#woocommerce #wordpress #vulnerability #0day #zeroday #infosec #cybersecurity #security