9.8

CVE-2022-42698

WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerability

Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload

Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.
Mögliche Gegenmaßnahme
Api2Cart Bridge Connector: Update to version 1.2.0, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Api2cart ≫ Api2cart Bridge Connector Version 1.0.0 SwPlatform wordpress
Api2cart ≫ Api2cart Bridge Connector Version 1.1.0 SwPlatform wordpress
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Api2Cart Bridge Connector
Version 1.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.89% 0.547
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
audit@patchstack.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://wordpress.org/plugins/api2cart-bridge-connector/#developers
Third Party Advisory
Release Notes
https://patchstack.com/database/vulnerability/api2cart-bridge-connector/wordpress-api2cart-bridge-connector-plugin-1-1-0-arbitrary-file-upload-vulnerability?_s_id=cve
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/5bf6d60f-57ac-4cbc-895f-a7db548cbf67
Third Party Advisory