CVE-2023-4216

Summary

CVE-2023-4216: The Orders Tracking plugin for WooCommerce, prior to version 1.2.6, fails to validate the file_url parameter during CSV file imports. This vulnerability enables high privilege users with manage_woocommerce capabilities to perform Traversal attacks, accessing any file on the web server. However, the content retrieved is restricted to the initial line of the file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.