| |
Vulnerability CVE-2023-5601
Published: 2023-11-06
| Description: |
The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE. |
Type:
CWE-434 (Unrestricted Upload of File with Dangerous Type)
References: |
https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
