The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Woo Refund And Exchange Lite Plugin | — | Update woo-refund-and-exchange-lite plugin to version 4.0.9, or a newer patched version | May 15, 2025 | Nov 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub