Beveiligingsadvies

CVE-2023-5601

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-06 20:41:49
Laatst bijgewerkt 2025-03-25 19:30:35
Toegewezen door WPScan
CVSS-score 9.8
Status PUBLISHED

Beschrijving

The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.