by Kastro
Paper/Archive/CVE-2022-4395

CVE-2022-4395

Unknown Membership For WooCommerce — Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

EPSS 18%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.1.971 × 2019.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

Affected

ProductAffectedFixed inSource
Membership For WooCommerce< 2.1.72.1.7CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refexploit-db.com/exploits/51959exploitwpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40refpacketstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html