Unauthenticated File Upload RCE in WooCommerce Product Input Fields

Executive Summary

This vulnerability affects the WordPress plugin 'Product Input Fields for WooCommerce' before version 2.0.2. When the 'accepted-types' setting is left empty, the plugin does not validate uploaded file types, allowing all files to be accepted. This enables unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution if the server does not enforce directory access rules.

Useful 0 Not Useful 0

Detection Guidance

Check if the Product Input Fields for WooCommerce plugin is installed and verify its version. If it is below 2.0.2, the system is vulnerable. Look for unexpected or suspicious file uploads in directories managed by WooCommerce.

Useful 0 Not Useful 0

Impact Analysis

Unauthenticated attackers could exploit this flaw to upload malicious files to your server, such as web shells or scripts. If your server does not restrict access to uploaded files, these could be executed remotely, compromising your system integrity, data confidentiality, and availability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. A successful exploit may result in data breaches, triggering legal penalties, reputational damage, and compliance violations.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Product Input Fields for WooCommerce plugin to version 2.0.2 or later immediately. Disable file uploads if not required or restrict uploads to specific trusted file types.

Useful 0 Not Useful 0