2 matches found
PT-2021-15757
Name of the Vulnerable Software and Affected Versions: WooCommerce Help Scout WordPress plugin versions prior to 2.9.1 Description: The issue allows unauthenticated users to upload any files to the site, which by default will end up in wp-content/uploads/hstmp. Recommendations: For versions prior...
9.8CVSS0.07908EPSS
SaveExploits2References5
CVE-2021-24212: Unrestricted Upload of File with Dangerous Type
The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...
9.8CVSS5.6AI score0.07908EPSS
SaveExploits2References3
20