Security Advisory
CVE-2018-20714
8.1
HIGH
Vulnerability Description
The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allows deletion of woocommerce.php, which leads to certain privilege checks not being in place, and therefore a shop manager can escalate privileges to admin.
Published Date
January 15, 2019
Official Source
NIST NVD Advisory