Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 2.4.0
- Public exploit
- None on Exploit-DB
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The Checkout Files Upload plugin for WooCommerce, a WordPress extension, is affected. An unauthenticated attacker could upload arbitrary files, including PHP scripts, which could allow them to run code remotely on servers that execute PHP from the uploads folder.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that lead to remote code execution on servers that execute PHP from the uploads directory.
Affected versions
- Unknown Checkout Files Upload for WooCommerce
fixed in 2.4.0