7.5
CVSSv2

CVE-2018-21007

Published: 29/08/2019 Updated: 07/09/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The woo-confirmation-email plugin prior to 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wisetr user email verification for woocommerce