CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in nunomorgadinho Plugin Propagator wp-propagator allows Upload a Web Shell to a Web Server.This issue affects Plugin Propagator: from n/a through <= 0.1.
Explanation of Vulnerability in Simple Terms
Plugin Propagator versions 0.1 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the site without authentication, potentially gaining the ability to run their own code. The vulnerability affects the entire system and can lead to complete compromise of confidentiality, integrity, and availability.
What an attacker can do
Upload arbitrary files and run their own code on the site without needing to log in.
Potential impact on your site
Complete site compromise: attackers can read all data, modify content, disable the site, or use it to attack others.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
