Security Advisory

CVE-2021-25003

9.8
CRITICAL

Vulnerability Description

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
Published Date March 14, 2022
Official Source NIST NVD Advisory