CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.
Explanation of Vulnerability in Simple Terms
WooCommerce PDF Vouchers versions before 4.9.5 contain a path traversal vulnerability that allows unauthenticated attackers to cause a denial of service by making the site unresponsive. The vulnerability exists in how the plugin handles file paths without proper validation. No authentication or user interaction is required to exploit this issue.
What an attacker can do
Make the site unresponsive or unavailable by triggering resource exhaustion through path traversal.
Potential impact on your site
Your WooCommerce store could become unavailable to customers if an attacker exploits this vulnerability.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
