【中文导读】该 CVE 涉及安全缺陷(严重风险)。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Unrestricted Upload of File with Dangerous Type vulnerability in ecomerciar Woocommerce Custom Profile Picture woo-custom-profile-picture allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Custom Profile Picture: from n/a through <= 1.0.