CVE-2022-4047 Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
Unauthenticated attackers can upload arbitrary files, including PHP, leading to remote code execution on sites using the Return Refund and Exchange For WooCommerce plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-4047?
CVE-2022-4047 is a critical vulnerability in Unknown Return Refund and Exchange For WooCommerce, published on 26 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE
Which versions are affected by CVE-2022-4047?
It affects 1 product.
Products include Wpswings Return Refund and Exchange for Woocommerce.
How do I fix CVE-2022-4047?
No fix has been published for CVE-2022-4047 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-4047 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-4047 exists.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in Unknown Return Refund and Exchange For WooCommerce
Sources
Also known as GHSA-3j85-6864-55p3.