| Package | Affected versions | Patched versions |
|---|---|---|
| stock manager for woocommerce | ≤ 2.5.7 |
The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free