CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
WPshop 2 – E-Commerce versions before 1.3.9.6 do not properly validate file uploads, allowing an attacker to upload malicious files without authentication. An attacker can upload executable code, such as PHP files, to gain control of the site. This vulnerability requires no user interaction and can be exploited remotely over the network.
What an attacker can do
Upload and execute malicious files on the site without authentication.
Potential impact on your site
An attacker can run arbitrary code on your site, steal data, modify content, or take the site offline.
Conditions required to exploit
Network access to the vulnerable WPshop 2 installation; no authentication required.
Key dates
External resources
Related vulnerabilities
