title: Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE
description: The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
product: Business Hours Pro
vendor: Unknown
versions:
lessThanOrEqual: 5.5.0, status: affected, version: 5.5.0, versionType: custom
}