CVE-2024-6366

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

28.99% chance of exploitation in the next 30 days, 98th percentile

Nuclei

high

Published

2024-07-29

Updated

2024-08-01

Proof-of-concept exploits (3)

• https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/
• Abdurahmon3236/CVE-2024-63660★ · 2024-08-03
• Nxploited/CVE-2024-6366-PoC0★ · 2025-02-02

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6366.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-4539
• CVE-2024-24549
• CVE-2024-31211
• CVE-2024-36539
• CVE-2024-38472
• CVE-2024-38473