Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7xp-c243-63mm

Опубликовано: 12 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.

EPSS

Процентиль: 65%
0.0048
Низкий

7.5 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.

EPSS

Процентиль: 65%
0.0048
Низкий

7.5 High

CVSS3

Дефекты

CWE-434