Unrestricted Upload of File with Dangerous Type Vulnerability Affects WappPress
CVE-2023-49815

10CRITICAL

Key Information:

Vendor
WordPress
Status
Wapppress
Vendor
CVE Published:
27 March 2024

Summary

A vulnerability exists in the WappPress Plugin created by WappPress Team that allows for the unrestricted upload of files with dangerous types. This flaw could enable unauthorized users to upload malicious files to the server, leading to potential exploitation. Affected versions include WappPress Plugin up to 5.0.3. It is crucial for website administrators utilizing this plugin to assess their installation and take necessary steps to mitigate any risks associated with this vulnerability.

Affected Version(s)

WappPress <= 5.0.3

References

https://patchstack.com/database/vulnerability/wapppress-b...
vdb-entry

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.