CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversal.This issue affects Membership For WooCommerce: from n/a through <= 3.1.0.
Explanation of Vulnerability in Simple Terms
Membership For WooCommerce versions 3.1.0 and earlier contain a path traversal vulnerability that allows unauthenticated attackers to disrupt site availability. An attacker can send specially crafted requests over the network to cause a denial of service. The vulnerability affects the entire site infrastructure due to scope change. Update to a version newer than 3.1.0.
What an attacker can do
Make the site unavailable or unresponsive by sending malicious requests.
Potential impact on your site
Your WooCommerce site could become unavailable or slow without warning or user action.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
