TI-2021-06780 CVE-2021-24493 · GHSA-wjxv-ccw6-j9xhShopp eCommerce <= 1.4 - Unauthenticated Arbitrary File UploadPriority MEDIUM 46The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01978 · Published 2021-09-13 · No fix listed CWE-434
