← Back

Naziinfotech

naziinfotech

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Ni Purchase Order(po) For Woocommerce
ni_purchase_order(po)_for_woocommerce
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5957
1Naziinfotech
1Ni Purchase Order(po) For Woocommerce
Jun 17, 2026
Jan 8, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web serve...Show more
The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web server, triggering an RCE vulnerability by uploading a web shell.Show less