CyberRota Analysis
AI-GeneratedThe MIPL Grouped Checkout Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to inadequate file type validation in the `mipl_wc_upload_file` function. This critical flaw allows unauthenticated attackers to upload malicious files, potentially leading to remote code execution on the affected server. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `mipl_wc_upload_file` function in all versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.