CVE Database /
CVE-2017-17058
CVE · High
CVE-2017-17058 — WooCommerce [woocommerce] < 4.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2017-17058
|
WooCommerce [woocommerce] < 4.0 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
High
7.5
|
< 4.0
|
4.0 |
2017-11-29 |
—
|
CVE-2017-17058
WooCommerce versions 3.x and earlier contain a directory traversal flaw accessible through the /wp-content/plugins/woocommerce/templates/emails/plain/ URI that allows traversal to parent directories. However, the maintainers argue this vulnerability is not practically exploitable since all template files include protective code that exits if WordPress constants are not defined.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings