PT-2025-24253 · WordPress · Agile Logix Store Locator
CVSS v3.1
6.6
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Agile Logix Store Locator WordPress versions 1.5.2 and earlier
Description
The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server.
Recommendations
For Agile Logix Store Locator WordPress versions 1.5.2 and earlier, update to a version that fixes this issue.
As a temporary workaround, consider restricting file uploads to prevent potential exploitation.
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Agile Logix Store Locator