CVE-2022-4109

CVE-2022-4109 is a path traversal vulnerability in the Wholesale Market for WooCommerce WordPress plugin prior to version 2.0.0. This flaw allows high-privilege users, such as administrators, to download arbitrary server logs, potentially bypassing intended access restrictions, especially in multisite environments. The vulnerability is rated as Low severity with a CVSS score of 2.7, indicating a network-based attack with low complexity but limited impact to confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.