Vulnerabilities > CVE-2023-51475 - Unspecified vulnerability in Wpmlmsoftware WP MLM Unilevel 4.0

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wpmlmsoftware

critical

NVD

Published: 2023-12-29

Updated: 2024-11-21

Summary

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.

Vulnerable Configurations

Part	Description	Count
Application	Wpmlmsoftware Wpmlmsoftware WP MLM Unilevel 4.0	1

References

https://patchstack.com/database/vulnerability/wp-mlm/wordpress-wp-mlm-unilevel-plugin-4-0-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/wp-mlm/wordpress-wp-mlm-unilevel-plugin-4-0-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve