CVE-2022-50972 | WooCommerce 7.1.0 PHP File class-wc-meta-box-product-images.php product-type code injection (Exploit 51156 / EUVD-2022-56008)

June 20, 2026 Yanac

A vulnerability was found in WooCommerce 7.1.0. It has been classified as critical. Impacted is an unknown function of the file class-wc-meta-box-product-images.php of the component PHP File Handler. Performing a manipulation of the argument product-type results in code injection.

This vulnerability is identified as CVE-2022-50972. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More