CVE-2024-5450

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS

0.80% chance of exploitation in the next 30 days, 54th percentile

Published

2024-07-13

Updated

2024-08-01

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/d91217bc-9f8f-4971-885e-89edc45b2a4d/

References

• CVE Record
• NVD entry

Related

• CVE-2024-54498
• CVE-2024-54507
• CVE-2024-5448
• CVE-2024-5452
• CVE-2024-5447
• CVE-2024-5458