CVE-2021-4455
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 19, 2025
Updated: Apr 21, 2025
CWE ID 434
Summary
CVE-2021-4455 is a vulnerability affecting the Smart Product Review plugin for WordPress. The issue stems from a lack of file type validation in all versions up to 1.0.4, enabling unauthenticated attackers to upload arbitrary files on the affected site's server. Successful exploitation could potentially lead to remote code execution, posing a significant risk to websites using this vulnerable plugin. Upgrading to the latest version or disabling the plugin is recommended to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.