Atomicwebstrategy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Atomicwebstrategy records in CISA KEV

No Atomicwebstrategy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Ninja Forms Product Add-ons 1 record HIGH

Records

1 record in Woocommerce Ninja Forms Product Add-ons · all components

TI-2023-05156 CVE-2023-5601 · GHSA-h8jx-25pr-hgm3

WooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload

HIGH 82

The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01093 Published 2023-11-06 Fixed in 1.7.1 CWE-434

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0