WooCommerce Ninja Forms Product Add-ons vulnerabilities
We track 1 vulnerability in WooCommerce Ninja Forms Product Add-ons products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WooCommerce Ninja Forms Product Add-ons vulnerabilities
- 9.8 Critical severity
WooCommerce Ninja Forms Product Add-ons: Unrestricted Upload of File with Dangerous Type
The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.