Vulnerabilities > Wptaskforce > Wpcargo Track Trace

DATE CVE VULNERABILITY TITLE RISK
2022-03-14 CVE-2021-25003 Unrestricted Upload of File with Dangerous Type vulnerability in Wptaskforce Wpcargo Track & Trace
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
network
low complexity
wptaskforce CWE-434
critical
9.8