FacturaONE para WooCommerce con VeriFactu
FacturaONE para WooCommerce con VeriFactu connects WooCommerce with FacturaONE to generate invoices and support VeriFactu requirements.
FacturaONE para WooCommerce con VeriFactu (facturaone-para-woocommerce-con-verifactu) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 27, 2026; the highest published CVSS base score is 9.
facturaone-para-woocommerce-con-verifactuCVE-2026-14289: FacturaONE unauthenticated file write can lead to code execution
FacturaONE para WooCommerce con VeriFactu before 5.37 exposes a request handler that relies only on a key which is empty when the plugin has not been configured. An unauthenticated attacker can reach that handler on a default or unconfigured installation and write an arbitrary file into a web-accessible directory; writing executable PHP can result in remote code execution.
| Safe version |
|
||
|---|---|---|---|
| Jul 27, 2026 |
CVE-2026-14289
FacturaONE unauthenticated file write can lead to code execution
FacturaONE para WooCommerce con VeriFactu before 5.37 exposes a request handler that relies only on a key which is empty when the plugin has not been configured. An unauthenticated attacker can reach that handler on a default or unconfigured installation and write an arbitrary file into a web-accessible directory; writing executable PHP can result in remote code execution.
|
5.37 |
CVE9.0
|