HaruTheme WooCommerce Designer Pro Unrestricted File Upload Vulnerability Allowing Web Shell Upload

A vulnerability allowing unrestricted file upload has been identified in HaruTheme WooCommerce Designer Pro versions through 1.9.24. This flaw could be exploited to upload a web shell to the server, potentially leading to unauthorized access and execution of malicious actions.

Impact

Exploitation of this vulnerability could allow a malicious actor to upload any type of file, including web shells, which could be executed to gain further access to the website.

Remediation

Patchstack has issued a virtual patch to block attacks targeting this vulnerability until an official fix is available. Websites using Patchstack can activate this virtual patch for immediate protection.