High severity7.5NVD Advisory· Published Dec 19, 2022· Updated Jun 17, 2026

CVE-2022-4106

Description

The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cedcommerce/Wholesale Market For Woocommerce
cpe:2.3:a:cedcommerce:wholesale_market_for_woocommerce:*:*:*:*:*:wordpress:*:*
Range: <1.0.7
WordPress/WooCommercecpe-rescue
Package: https://wordpress.org/plugins/woocommerce
WordPress/Wholesale Market for WooCommercellm-create
Range: <1.0.7

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/b60a0d3d-148f-4e9b-baee-7332890804ednvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000