CVE-2024-54262

CVE-2024-54262 is a critical unrestricted file upload vulnerability in the Siddharth Nagar Import Export For WooCommerce plugin, affecting versions up to 1.5. This flaw allows an authenticated attacker to upload a web shell, leading to complete compromise of the web server. With a CVSS score of 9.9, it presents a high risk due to its low attack complexity and severe impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code beyond a single mention on GitHub, its high EPSS score and community discussion indicate a significant potential for future exploitation.