Unrated severityNVD Advisory· Published Jul 21, 2021· Updated Sep 16, 2024

Cross-Site Request Forgery in WooCommerce Stock Manager WordPress Plugin

CVE-2021-34619

Description

The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Woocommerce Stock Managerllm-fuzzy
Range: <=2.5.7
Package: https://wordpress.org/plugins/woocommerce-stock-manager
Storeapps/Stock Manager For Woocommercecpe-rescue
Range: 2.5.7

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/browser/woocommerce-stock-manager/trunk/admin/views/import-export.phpmitrex_refsource_MISC
www.wordfence.com/blog/2021/06/high-severity-vulnerability-patched-in-woocommerce-stock-manager-plugin/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000