Critical severity · published Dec 26, 2022
CVE-2022-4047
The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated…
9.8
CVSS
6.6%
EPSS
No
On KEV
Description
The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.6% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RR
Return Refund And Exchange For Woocommerce · Wpswings
before 4.0.9 · source: NVD
Affected product
RR
Return Refund And Exchange For Woocommerce
Wpswings
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4047
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4047
Exploit
https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94
More from Return Refund And Exchange For Woocommerce
7.5
CVE-2024-13641
Return Refund and Exchange For WooCommerce <= 4.4.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
5.4
CVE-2025-12881
Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Order Message Read
5.4
CVE-2024-13692
Return Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
CVE-2025-12086
Return Refund and Exchange For WooCommerce <= 4.5.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Refund Request Cancellation