| Package | Affected versions | Patched versions |
|---|---|---|
| woocommerce ninja forms product add-ons | < 1.7.1 | 1.7.1 |
The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free