Researchers
Back
Ex3Ptional
#28411
of 60,574
9.8
Total CVSS
Vulnerabilities
·
1
PT-2023-14408
2023-01-04
9.8
CVE-2022-4395
WordPress
Membership For Woocommerce
The issue allows unauthenticated users to upload arbitrary files, including malicious PHP code, which could lead to remote code execution (RCE). This is due to a lack of validation for uploaded files.