CVE-2008-6811

CVE-2008-6811 describes an unrestricted file upload vulnerability in the image_processing.php component of the e-Commerce Plugin 3.4 and earlier for WordPress. This flaw allows unauthenticated remote attackers to execute arbitrary code by uploading malicious files with executable extensions, which can then be directly accessed. With a CVSS score of 6.8 (medium severity), successful exploitation requires moderate attack complexity but can lead to partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.