CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows Upload a Web Shell to a Web Server.This issue affects Verbalize WP: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
Verbalize WP versions 1.0 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the site without authentication or user interaction. This allows execution of malicious code, data theft, and site takeover. All installations should update immediately.
What an attacker can do
Upload and execute arbitrary files on the site, gaining full control.
Potential impact on your site
Complete site compromise: attackers can run code, steal data, modify content, and disable the site.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
