CVE-2021-24171

Summary of CVE-2021-24171 (WooCommerce Upload Files, WordPress) : Versions prior to 59.4 allow unauthenticated arbitrary file upload due to a single sanitization pass that removes blocked extensions (e.g., .php). An attacker could bypass by embedding a blocked extension inside another blocked ext...