An unrestricted file upload vulnerability in the ReachShip WooCommerce plugin allows authenticated attackers to achieve remote code execution.

The plugin fails to properly validate file types during upload (CWE-434), allowing an attacker with low-level privileges to upload and execute malicious code on the server.

With a CVSS score of 9.9, this vulnerability carries a severe impact, enabling attackers to gain remote code execution capabilities. This could allow for total compromise of the underlying web server, unauthorized database access, and potential lateral movement within the hosting environment.

Immediate Action: Update the ReachShip WooCommerce Multi-Carrier & Conditional Shipping plugin to version 4.3.2 or later.

Proactive Monitoring: Monitor the server's uploads directory for the presence of unauthorized executable files (e.g., .php files) and audit web server access logs for suspicious file access patterns.

Compensating Controls: Configure the web server to disable script execution in the directory where user-uploaded files are stored.

Public Exploit Available: Unknown — no confirmed weaponized exploit or public PoC identified in provided data.

To secure the environment, administrators must apply the vendor patch (version 4.3.2) immediately. Ensure that user roles are strictly managed to minimize the pool of potential attackers capable of reaching the vulnerable functionality.