exploitDog

CVE-2025-60219

Опубликовано: 26 сент. 2025

Источник: nvd

CVSS3: 10

EPSS Низкий

Описание

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro allows Upload a Web Shell to a Web Server. This issue affects WooCommerce Designer Pro: from n/a through 1.9.24.

Ссылки

https://patchstack.com/database/wordpress/plugin/wc-designer-pro/vulnerability/wordpress-woocommerce-designer-pro-plugin-1-9-24-arbitrary-file-upload-vulnerability?_s_id=cve

EPSS

Процентиль: 24%

0.00083

Низкий

10 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-wmqf-w969-fg83

CVSS3: 10

github

4 месяца назад

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro allows Upload a Web Shell to a Web Server. This issue affects WooCommerce Designer Pro: from n/a through 1.9.24.

EPSS

Процентиль: 24%

0.00083

Низкий

10 Critical

CVSS3

Дефекты

CWE-434