Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Ecomerciar Woocommerce Custom Profile Picture allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Custom Profile Picture: from n/a through 1.0.

CVSS 1 Total

ScoreSeverityVersionVector String
9.9CRITICAL3.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Product Status

Learn more

Versions 1 Total

Default Status: unaffected

affected

Credits

  • stealthcopter (Patchstack Alliance) finder

Authorized Data Publishers