VYPR

Upload Files

by WooCommerce

CVEs (1)

  • CVE-2024-10820Nov 13, 2024
    risk 0.00cvss epss 0.01

    The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 84.3. This makes it possible for unauthenticated attackers to upload arbitrary files…