9.8crit
CVE-2018-8710
A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrat…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
4.2%
percentile 91%
Public exploits
0
none known
Summary
A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the "shortcode" parameters would be evaluated. Normally unauthenticated users can't evaluate shortcodes as they are often sensitive.
Exploit prediction (EPSS)
4.18% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-287 Improper Authentication
References
- wordpress.org /plugins/woocommerce-products-filter/#developers · x_refsource_MISC, x_transferred
- sec-consult.com /en/blog/advisories/arbitrary-shortcode-execution-local-file-inclusion-in-woof-pluginus-ne · x_refsource_MISC, x_transferred
- woocommerce-filter.com /update-woocommerce-products-filter-v-2-2-0/ · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-8710
- NVD: CVE-2018-8710
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.