CVE-2021-24212

high-risk
Published 2021-04-05

The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp.

Do I need to act?

!
74.5% chance of exploitation in next 30 days
EPSS score — higher than 26% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Woocommerce

References (4)

Release Notes http://dzv365zjfbd8v.cloudfront.net/changelogs/woocommerce-help-scout/changelog....
Exploit https://wpscan.com/vulnerability/cf9305e8-f5bc-45c3-82db-0ef00fd46129
Release Notes http://dzv365zjfbd8v.cloudfront.net/changelogs/woocommerce-help-scout/changelog....
Exploit https://wpscan.com/vulnerability/cf9305e8-f5bc-45c3-82db-0ef00fd46129
56
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 19/34 · Moderate
Exposure 5/34 · Minimal