CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Product File Upload for WooCommerce products-file-upload-for-woocommerce allows Path Traversal.This issue affects Product File Upload for WooCommerce: from n/a through <= 2.2.4.
Explanation of Vulnerability in Simple Terms
Product File Upload for WooCommerce versions up to 2.2.4 contain a path traversal vulnerability that allows an attacker to manipulate file paths during upload operations. By crafting malicious input, an attacker can cause the site to become unavailable or unresponsive. No authentication is required, but the attack is difficult to execute reliably. The vulnerability affects the broader system scope beyond the plugin itself.
What an attacker can do
Make the site unavailable or unresponsive by exploiting file path handling during uploads.
Potential impact on your site
Your WooCommerce site may become unavailable or experience service disruption if exploited.
Conditions required to exploit
Network access to the site; no login required, but attack complexity is high.
Key dates
External resources
Related vulnerabilities
