CVE-2024-25925

CVE-2024-25925 describes an Unrestricted Upload of File with Dangerous Type vulnerability in the SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts WordPress plugin. Affected versions are up to 3.5.12; the issue allows unauthenticated arbitrary file uploads, enabling potential rem...

WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload

Description The SysBasics Easy Checkout Field Editor, Fees & Discounts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.5.12. This makes it possible for unauthenticated attackers to upload arbitrary files on t...