critical9.8
CVE-2023-5601
The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to uplo…
Impact
The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atomicwebstrategy | Woocommerce Ninja Forms Product Add-Ons | before 1.7.1 |