CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper file type validation in the 'wpse_file_and_ext_webp' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
WP Enable WebP versions 1.0 and earlier contain an unrestricted file upload vulnerability. An attacker with low-level site access can upload arbitrary files to the server, potentially gaining the ability to run their own code on the site. This affects the confidentiality, integrity, and availability of the entire WordPress installation.
What an attacker can do
Upload arbitrary files to the server and execute code on the site.
Potential impact on your site
Compromised site with potential data theft, malware injection, and complete loss of site control.
Conditions required to exploit
Attacker needs a low-privilege account (subscriber or contributor level) on the WordPress site.
Key dates
External resources
