PT-2025-29784
CVE-2025-29009
·
Published
2025-07-11
·
Updated
2026-11-01
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Medical Prescription Attachment Plugin for WooCommerce versions prior to 1.2.4
Description
An unrestricted upload of files with dangerous types exists due to missing file type validation. This allows unauthenticated attackers to upload arbitrary files, such as a web shell, to the web server, which may lead to remote code execution.
Recommendations
Update the plugin to a version newer than 1.2.3.
Found an issue in the description? Have something to add? Feel free to write us 👾