Monitor free

Report

New Known

Verified

Fixed

WordPress MultiSafepay plugin for WooCommerce plugin <= 4.15.0 - Unauthenticated Arbitrary File Read vulnerability

5.3

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

MultiSafepay plugin for WooCommerce

Type

Plugin

Vulnerable versions

<= 4.15.0

Fixed in

4.16.0

PSID

af3125a7f3b5

CVE ID

CVE-2022-33901

Classification

Other Vulnerability Type

OWASP Top 10

A3: Sensitive Data Exposure

Required privilege

Credits

Roldan Brandon (Patchstack Alliance)

Publicly disclosed

2022-07-18

Patchstack vPatch available since

09.12.2021

Details

Unauthenticated Arbitrary File Read vulnerability discovered by Brandon Roldan in WordPress MultiSafepay plugin for WooCommerce plugin (versions <= 4.15.0).

Solution

Update the WordPress MultiSafepay plugin for WooCommerce plugin to the latest available version (at least 4.16.0).

References