CVE-2025-53213: WordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload Vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping allows Using Malicious Files. This issue affects ReachShip WooCommerce Multi-Carrier & Conditional Shipping: from n/a through 4.3.1.
Other sources
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping elex-reachship-multi-carrier-conditional-shipping allows Using Malicious Files.This issue affects ReachShip WooCommerce Multi-Carrier & Conditional Shipping: from n/a through <= 4.3.1.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53213?
The severity of CVE-2025-53213 is classified as high due to its potential to allow malicious file uploads.
How do I fix CVE-2025-53213?
To fix CVE-2025-53213, upgrade the ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping plugin to version 4.3.2 or later.
What types of files are affected by CVE-2025-53213?
CVE-2025-53213 allows the unrestricted upload of files of dangerous types, which can potentially include executable and script files.
What versions of the plugin are vulnerable to CVE-2025-53213?
CVE-2025-53213 affects versions of the ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping plugin from n/a up to and including 4.3.1.
Is this vulnerability limited to specific platforms?
Yes, CVE-2025-53213 specifically affects the ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping plugin on WordPress.