Lucene search
WpvulndbWPVDB-ID:BA72480E-326D-4D4C-8251-0F27CFEB6453HistoryDec 13, 2023 - 12:00 a.m.
Export and Import Users and Customers < 2.4.9 - Shop Manager+ Arbitrary File Upload
2023-12-1300:00:00
wpscan.com
8
plugin
arbitrary file upload
shop manager
Description The plugin does not properly check uploaded files via the upload_import_file() function, allowing users with the Shop Manager role and above to upload arbitrary files
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.4.9 |
Related
cvelist
cvelist
CVE-2023-6558
2024-01-11 08:32:35
prion
prion
Input validation
2024-01-11 09:15:00
nvd
nvd
CVE-2023-6558
2024-01-11 09:15:49
cve
cve
CVE-2023-6558
2024-01-11 09:15:49
wordfence
wordfence
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.3%
Related for WPVDB-ID:BA72480E-326D-4D4C-8251-0F27CFEB6453