← WordPress Vulnerabilities
WordPress security by component

Api2Cart Bridge Connector

Api2Cart Bridge Connector is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Nov 18, 2022; the highest CVE/CNA score is 10.

Plugin slug: api2cart-bridge-connector

CVE-2022-42698: Api2Cart Bridge Connector: Dangerous file upload

Api2Cart Bridge Connector is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedNov 18, 2022
Safe version guidanceSee mitigation notes
Safe version
Nov 18, 2022 CVE-2022-42698
Api2Cart Bridge Connector: Dangerous file upload
Api2Cart Bridge Connector is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE9.8
NVD9.8
Nov 18, 2022 CVE-2022-42497
Api2Cart Bridge Connector: Code execution
Api2Cart Bridge Connector is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE10.0
NVD9.8