CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through <= 2.0.
Explanation of Vulnerability in Simple Terms
WP Quick Setup versions 2.0 and earlier allow authenticated users with low privileges to upload files without restriction. An attacker can upload malicious files to compromise the site's integrity, confidentiality, and availability. The vulnerability affects the entire system due to scope change, making it a critical risk for any WordPress installation running this plugin.
What an attacker can do
Upload malicious files to the site and execute arbitrary code or modify site content.
Potential impact on your site
Attackers with basic user accounts can upload and execute malicious code, leading to full site compromise.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
