CVE-2023-5601 (published 2023-11-06T20:41:49.307Z)
The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.
Affected products: Vendor: Unknown
Product: WooCommerce Ninja Forms Product Add-ons
Versions: 0