Skip to content
OpenAdvisories
Critical · 9.9 CVE-2025-53213 EUVD-2025-28501GHSA-v7g4-336j-rg22

WordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload Vulnerability

Published Aug 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping elex-reachship-multi-carrier-conditional-shipping allows Using Malicious Files.This issue affects ReachShip WooCommerce Multi-Carrier & Conditional Shipping: from n/a through <= 4.3.1.

Affected products

VendorProductAffectedFixed
ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping ≤ 4.3.1 —

References