CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects WooCommerce License Manager: from n/a through <= 7.0.6.
Explanation of Vulnerability in Simple Terms
WooCommerce License Manager versions 7.0.6 and earlier allow authenticated administrators to upload files without proper validation. An attacker with admin access can upload malicious files to compromise the site. The vulnerability affects file handling across the entire WordPress installation due to scope change.
What an attacker can do
Upload malicious files to the site and execute code if they have admin access.
Potential impact on your site
A compromised admin account can upload files that execute code, potentially taking over your entire WordPress site.
Conditions required to exploit
Attacker must have WordPress administrator privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
