Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Finale Lite – Sales Countdown Timer & Discount for WooCommerce 2.9.1

  • Severity: high-risk
  • Status: Open
  • Publication: May 29, 2019

The Finale WooCommerce Sale Countdown plugin is a plugin for WordPress websites, and has a security vulnerability that allows someone to upload any type of file to the website’s server without needing to be approved first. If someone were to exploit this vulnerability, they could run malicious code on the website, which could cause serious damage. This vulnerability affects all versions of the Finale WooCommerce Sale Countdown plugin up to and including version 2.9.0.

Detected in:

Finale Lite – Sales Countdown Timer & Discount for WooCommerce open vulnerable versions: >= * < 2.9.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.