← Back

Ni Purchase Order(po) For Woocommerce

ni_purchase_order(po)_for_woocommerce

Vendor: Naziinfotech • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5957
1Naziinfotech
1Ni Purchase Order(po) For Woocommerce
Jun 17, 2026
Jan 8, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web serve...Show more
The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web server, triggering an RCE vulnerability by uploading a web shell.Show less