CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the wc-upload-file[] parameter in all versions up to, and including, 1.1.4. This makes it possible for unauthenticated attackers to move arbitrary files on the server, which can easily lead to remote code execution when the right file is moved (such as wp-config.php).
Explanation of Vulnerability in Simple Terms
The Drag and Drop Multiple File Upload for WooCommerce plugin versions 1.1.4 and earlier contain a path traversal vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary files on the server. The vulnerability exists in the file upload handler and requires no user interaction. An attacker can exploit this to access sensitive configuration files, upload malicious code, or disable the site.
What an attacker can do
Read, write, or delete any file on the server without authentication.
Potential impact on your site
Attackers can steal database credentials, upload malware, or take the site offline without needing a user account.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
