2019-01-15 17:29:00 2019-10-03 02:03:26

The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allows deletion of woocommerce.php, which leads to certain privilege checks not being in place, and therefore a shop manager can escalate privileges to admin.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

NONE

Integrity

PARTIAL

Availability

PARTIAL
Woocommerce Woocommerce 1.0 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.0.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.0.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.0.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.0.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.1.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.1.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.1.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.2.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.2.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.2.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.2.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.3.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.3.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.4.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.4.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.4.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.4.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.2.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.7.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.5.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.5.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.5.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 1.6.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Beta0 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.0 Rc3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.10 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.11 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.12 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.13 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.14 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.15 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.16 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.17 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.18 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.19 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.0.20 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.10 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.11 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.1.12 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.10 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.2.11 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.10 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.11 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.12 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.3.13 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.0 Beta4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.10 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.11 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.12 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.4.13 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.0 Rc3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.5.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 Beta4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.10 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.11 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.12 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.13 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.6.14 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.7.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.7.0 Beat1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.7.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.7.0 Beta3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.7.0 Beta4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 2.7.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.7 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.8 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.0.9 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.1.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.2.6 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.1 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.1 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.2 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.2 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.3.5 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.0 - ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.0 Beta1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.0 Beta2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.0 Rc1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.0 Rc2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.1 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.2 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.3 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.4 ~~~wordpress~~ (not an official CPE) Woocommerce Woocommerce 3.4.5 ~~~wordpress~~ (not an official CPE)