CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the 'attachment' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/attachment directory which can contain file attachments for order refunds.
Explanation of Vulnerability in Simple Terms
The Return Refund and Exchange For WooCommerce plugin through version 4.4.5 exposes sensitive information to unauthenticated attackers over the network. The vulnerability requires specific conditions to exploit but does not require user interaction. Affected sites should update to a version newer than 4.4.5 to prevent unauthorized access to protected data.
What an attacker can do
Read sensitive information without authentication, such as refund or exchange request details.
Potential impact on your site
Customer refund and exchange data may be exposed to anyone on the internet without needing a login.
Conditions required to exploit
Network access; specific conditions must be met but no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
