Vulnerability Details CVE-2022-4395
The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.73
EPSS Ranking 98.7%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-4395
-
cpe:2.3:a:wpswings:membership_for_woocommerce:*