CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This issue affects WP REST API FNS: from n/a through <= 1.0.0.
Explanation of Vulnerability in Simple Terms
WP REST API FNS versions 1.0.0 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the site without authentication, potentially gaining the ability to run malicious code. This affects the entire site and any data stored on it. Immediate patching or disabling the plugin is required.
What an attacker can do
Upload arbitrary files to the site and execute malicious code without authentication.
Potential impact on your site
Complete site compromise: attackers can run code, steal data, modify content, or take the site offline.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
