CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 16.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. User registration must be enabled for this to be exploited.
Explanation of Vulnerability in Simple Terms
WordPress User Extra Fields plugin versions 16.5 and earlier allow unauthenticated attackers to upload arbitrary files to the site without restriction. An attacker can upload malicious files such as PHP scripts to gain control of the site. No user interaction or authentication is required to exploit this vulnerability.
What an attacker can do
Upload arbitrary files (including PHP scripts) to the site without authentication.
Potential impact on your site
Attackers can upload malicious files and execute code on your site, leading to complete compromise.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
