CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through <= 1.13.1.
Explanation of Vulnerability in Simple Terms
WPMasterToolKit versions up to 1.13.1 allow authenticated administrators to upload files without proper validation. An attacker with admin access can upload malicious files to compromise the site. The vulnerability affects file handling across the entire WordPress installation due to scope change. Update to version 2.21.0 or later to resolve this issue.
What an attacker can do
Upload malicious files to the site and execute code or modify site content.
Potential impact on your site
A compromised admin account can upload files that execute code or alter your site's functionality and data.
Conditions required to exploit
Attacker must have administrator-level access to WordPress.
Key dates
External resources
Related vulnerabilities
