CVE-2022-4395

Deeper analysis

The Membership For WooCommerce WordPress plugin before version 2.1.7 contains an unauthenticated file-upload flaw that permits arbitrary files, including malicious PHP payloads, to be stored and executed on the server. The affected component is the membership-management extension for WooCommerce sites, which fails to enforce any server-side validation or type restrictions on user-supplied uploads.

An unauthenticated attacker can therefore send a crafted HTTP request containing a web shell or other executable file, place it in a web-accessible directory, and invoke it to obtain remote code execution with the privileges of the web server process. The vulnerability carries a CVSS 3.1 score of 9.8, reflecting network attack vector, no required credentials, and full confidentiality, integrity, and availability impact.

Publicly available references, including WPScan, Exploit-DB, and PacketStorm, document working proof-of-concept exploits and recommend immediate upgrade to 2.1.7 or later as the primary mitigation. The CVE’s EPSS score has remained elevated, with a recorded peak of 0.7740 and a current value of 0.7628, indicating sustained exploitation interest after disclosure.