Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server

CVE-2023-5953 is a high-severity vulnerability affecting the Welcart e-Commerce WordPress plugin versions prior to 2.9.5. The core issue stems from the plugin's failure to properly validate files uploaded via an AJAX action. Specifically, the plugin does not restrict the types of files that authenticated users can upload, nor does it implement authorization checks or Cross-Site Request Forgery (CSRF) protections on the upload endpoint. This combination allows any authenticated user, including low-privileged roles such as subscribers, to upload arbitrary files, including potentially malicious PHP scripts, to the server. Once uploaded, these files can be executed on the server, leading to full compromise of the web application and underlying server environment. The vulnerability is classified under CWE-434 (Unrestricted Upload of File with Dangerous Type) and CWE-352 (Cross-Site Request Forgery), highlighting both the lack of file type validation and missing CSRF protections. The CVSS v3.1 base score is 8.8, reflecting the ease of exploitation (network attack vector, low attack complexity, requiring only low privileges and no user interaction) and the severe impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the vulnerability presents a critical risk due to the potential for remote code execution and server takeover. The lack of patch links suggests that a fixed version (2.9.5 or later) should be applied once available or that users should upgrade immediately if not already done. The vulnerability affects the Welcart e-Commerce plugin, which is used to add e-commerce functionality to WordPress sites, often handling sensitive customer and payment data. This makes the vulnerability particularly dangerous in an e-commerce context where data breaches and service disruptions can have significant business and regulatory consequences.

Detailed information about CVE-2023-5953: CWE-434 Unrestricted Upload of File with Dangerous Type in Unknown Welcart e-Commerce affecting Unknown Welcart e-Comm

CVE-2023-5953: CWE-434 Unrestricted Upload of File with Dangerous Type in Unknown Welcart e-Commerce - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-5953: CWE-434 Unrestricted Upload of File with Dangerous Type in Unknown Welcart e-Commerce

Threats Tagged 'cve-2023-5953'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-5953'

Lead Pen Test Professional