Threats tagged 'ghsa-h6g6-j3rf-hcqm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-103688The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its High2026-10-28GCVE DatabaseCVE-2026-103688 The Checkout Files Upload plugin for WooCommerce WordPress versions before 2.4.0 does not validate uploaded file types if the accepted file types setting is left empty. This misconfiguration allows unauthenticated users to upload arbitrary files, including PHP scripts, which can lead to remote code execution on servers that execute PHP files from the uploads directory. Report on CVE-2026-103688 Vulnerability #ghsa-h6g6-j3rf-hcqm	GCVE Database	2026-10-28

Page 1 of 1