WooCommerce Upload Files vulnerabilities
We track 1 vulnerability in WooCommerce Upload Files products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WooCommerce Upload Files vulnerabilities
- 9.8 Critical severity
WooCommerce Upload Files: Unrestricted Upload of File with Dangerous Type
The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 84.3. This makes it possible for unauthenticated attackers to upl