Beveiligingsadvies

CVE-2018-25436

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-15 12:00:50

Laatst bijgewerkt 2026-06-15 16:19:36

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files by exploiting the upload-package.php endpoint. Attackers can submit POST requests with malicious file extensions to the upload handler, which moves files without validation to the plugin upload directory, enabling remote code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗