Beveiligingsadvies

CVE-2021-24962

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-28 17:21:01

Laatst bijgewerkt 2024-08-03 19:49:14

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can then be used to upload a PHP code disguised as an image inside the auto-loaded directory of the plugin, resulting in arbitrary code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗