The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up…
High CVSS 8.8
Summary
The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in extension_is_allowed() that returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Core/Services/AttachmentService.php#L112
- https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Core/Services/AttachmentService.php#L446
- https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Modules/Support/Rest/Controllers/RestPortalController.php#L574
- https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Modules/Support/Rest/Controllers/RestPortalController.php#L622
- https://www.wordfence.com/threat-intel/vulnerabilities/id/0feed03e-fedf-4443-94e0-fbb2c8baba71?source=cve
Timeline
- nvd_ingest NVD