CVE-2022-4328

CRITICAL 9.8CVE-2022-4328 · Published 06/03/2023 · updated 17/06/2026

In short

CVE-2022-4328 is a CRITICAL (CVSS 9.8) vulnerability affecting woocommerce checkout field manager (najeebmedia).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.4% of all vulnerabilities.
Fix: update to 18.0 or later.

Package	Affected versions	Patched versions
woocommerce checkout field manager najeebmedia	`< 18.0`	`18.0`

Description

The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

References

wpscan.com/vulnerability/4dc72cd2-81d7-4a66-86bd-c9cfaf690eed · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free