Description (CNA)
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Business Hours Pro | affected 5.5.0 through 5.5.0 |
CWE
CWE-434
References
- https://wpscan.com/vulnerability/10528cb2-12a1-43f7-9b7d-d75d18fdf5bb
- https://codecanyon.net/item/business-hours-pro-wordpress-plugin/9414879
ADP enrichment
No English description supplied.