Security Advisory
CVE-2021-24240
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.