← Back

Wemanage

wemanage

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wemanage
wemanage
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-1205
1Wemanage
1Wemanage
Jun 17, 2026
Mar 20, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the nouve...Show more
The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the nouvello_upload_csv_file function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.Show less