CVE-2023-5953

    Dashboard / Vulnerabilities / CVE-2023-5953

    CVE-2023-5953

    Published: 4 Dec 2023Last Modified: 12 Mar 2026

    Summary:

    Details: The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server

    References: , https://wpscan.com/vulnerability/6d29ba12-f14a-4cee-baae-a6049d83bce6

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-5953 | CVE-DB