CVE-2023-51421: WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload
Published Dec 29, 2023
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.
Affected Software
1 affected component
Soft8Soft Verge3d Wordpress<=4.5.2
Event History
Dec 29, 2023
CVE Published
via MITRE·01:18 PM
Data Sourced
via MITRE·01:18 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-51421?
CVE-2023-51421 is classified as a high-severity vulnerability due to the risk of unrestricted file uploads.
2
How do I fix CVE-2023-51421?
To fix CVE-2023-51421, upgrade your Verge3D Publishing and E-Commerce software to version 4.5.3 or later.
3
Which versions of Verge3D are affected by CVE-2023-51421?
CVE-2023-51421 affects Verge3D Publishing and E-Commerce versions up to and including 4.5.2.
4
What type of vulnerability is CVE-2023-51421?
CVE-2023-51421 is categorized as an Unrestricted Upload of File with Dangerous Type vulnerability.
5
Who is the vendor associated with CVE-2023-51421?
The vendor associated with CVE-2023-51421 is Soft8Soft LLC.