CVE-2023-5601

The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc	Exploit Third Party Advisory
https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:atomicwebstrategy:woocommerce_ninja_forms_product_add-ons:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 08:42

Type	Values Removed	Values Added
References	~~() https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc - Exploit, Third Party Advisory~~	() https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc - Exploit, Third Party Advisory

Information

Published : 2023-11-06 21:15

Updated : 2025-03-25 20:15

NVD link : CVE-2023-5601

Mitre link : CVE-2023-5601

CVE.ORG link : CVE-2023-5601

JSON object : View

Products Affected

atomicwebstrategy

woocommerce_ninja_forms_product_add-ons

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2023-5601", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-11-06T21:15:10.063", "references": [{"url": "https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/0035ec5e-d405-4eb7-8fe4-29dd0c71e4bc", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE."}, {"lang": "es", "value": "El complemento WooCommerce Ninja Forms Product Add-ons para WordPress anterior a 1.7.1 no valida el archivo que se va a cargar, lo que permite que cualquier usuario no autenticado cargue archivos arbitrarios en el servidor, lo que lleva a RCE."}], "lastModified": "2025-03-25T20:15:20.667", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:atomicwebstrategy:woocommerce_ninja_forms_product_add-ons:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "DE4DA17D-6B1B-4D86-B540-AC10BF59BF61", "versionEndExcluding": "1.7.1"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}