← WordPress Vulnerabilities
WordPress security by component

W2S – Migrate WooCommerce to Shopify

W2S – Migrate WooCommerce to Shopify is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 30, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: w2s

CVE-2024-12861: W2S – Migrate WooCommerce to Shopify: Filesystem traversal

W2S – Migrate WooCommerce to Shopify is affected by filesystem traversal. Exploitation requires at least subscriber-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedJan 30, 2025
Safe version guidanceSee mitigation notes
Safe version
Jan 30, 2025 CVE-2024-12861
W2S – Migrate WooCommerce to Shopify: Filesystem traversal
W2S – Migrate WooCommerce to Shopify is affected by filesystem traversal. Exploitation requires at least subscriber-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE6.5
NVDPending