Web Ready Now WR Price List Manager For WooCommerce Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Web Ready Now WR Price List Manager for WooCommerce, affecting versions through 1.0.8. This vulnerability allows unrestricted upload of files with dangerous types, such as web shells, which can be executed on the web server.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected web server, potentially leading to unauthorized access and control over the website.

Remediation

Users are advised to update to a version of the WR Price List Manager for WooCommerce that is not vulnerable. Patchstack has issued a virtual patch to block attacks targeting this vulnerability.