Threats tagged 'ghsa-98xv-x2q6-m2xg'

The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress versions up to and including 3.8.0 contains a vulnerability that allows unauthenticated attackers to delete arbitrary attachments. This occurs due to a missing capability or ownership check in the ajax_remove_uploaded() function, which is accessible via both authenticated and unauthenticated AJAX endpoints and protected only by a nonce exposed on the public checkout page. Exploitation can lead to loss of important media files and potential denial of service.