CVE-2023-23970

Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5.

Score

CVSS 3.1 9.9 Critical

Status

Modified - audit@patchstack.com

Published

2023-12-20

Last modified

2026-04-28

Weaknesses

CWE-434

Affected products

• Corsa (Woorockets)

References

• https://patchstack.com/database/vulnerability/corsa/wordpress-corsa-theme-1-5-arbitrary-file-upload?_s_id=cve