CVE-2021-25003 WPCargo < 6.9.0 - Unauthenticated RCE

2022-03-1414:41:11

CWE-94

WPScan

www.cve.org

9.8 High

AI Score

Confidence

High

0.612 Medium

EPSS

Percentile

97.8%

JSON

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE

CNA Affected

[
  {
    "product": "WPCargo Track & Trace",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "6.9.0",
        "status": "affected",
        "version": "6.9.0",
        "versionType": "custom"
      }
    ]
  }
]