High severity8.8NVD Advisory· Published Nov 7, 2022· Updated Jun 17, 2026

CVE-2022-3537

Description

The Role Based Pricing for WooCommerce WordPress plugin before 1.6.2 does not have authorisation and proper CSRF checks, and does not validate files to be uploaded, allowing any authenticated users like subscriber to upload arbitrary files, such as PHP

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Woocommerce Role Pricingcpe-rescue
Package: https://wordpress.org/plugins/woocommerce-role-pricing
WordPress/Role Based Pricing for WooCommercellm-create
Range: <1.6.2

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/696868f7-409d-422d-87f4-92fc6bf6e74envdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000