CVE-2022-4395 — Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

Description (CNA)

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

Affected (CNA)

Vendor / product	Versions
Unknown / Membership For WooCommerce	affected 0 before 2.1.7

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40

ADP enrichment

CVE

No English description supplied.

https://packetstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html
https://www.exploit-db.com/exploits/51959
https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40

CISA-ADP

No English description supplied.

No references supplied.