PoC Index

CVE-2024-6330

CRITICAL 9.8EPSS 2.1%

The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.14% chance of exploitation in the next 30 days, 81th percentile
Published
2024-08-19

Proof-of-concept exploits (3)

References

Related