Lucene search

CVE-2021-24284

🗓️ 14 May 2021 00:00:00Reported by AttackerKBType

The Kaswara Modern VC Addons WordPress plugin allows unauthenticated arbitrary file upload via the ‘uploadFontIcon’ AJAX action

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 13
CNVD	WordPress plugin code issue vulnerability	20 May 202100:00	–	cnvd
Patchstack	WordPress Modern WPBakery Page Builder Addons premium plugin <= 3.0.1 - Arbitrary File Upload/Deletion vulnerabilities	21 Apr 202100:00	–	patchstack
WPVulnDB	Kaswara Modern VC Addons (0-day) - Unauthenticated Arbitrary File Upload	20 Apr 202100:00	–	wpvulndb
Malwarebytes	Warning for WordPress admins: uninstall the Modern WPBakery plugin immediately!	19 Jul 202212:07	–	malwarebytes
Nuclei	WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload	20 Jul 202210:34	–	nuclei
wpexploit	Kaswara Modern VC Addons (0-day) - Unauthenticated Arbitrary File Upload	20 Apr 202100:00	–	wpexploit
Wordfence Blog	PSA: Sudden Increase In Attacks On Modern WPBakery Page Builder Addons Vulnerability	13 Jul 202217:52	–	wordfence
The Hacker News	Experts Notice Sudden Surge in Exploitation of WordPress Page Builder Plugin Vulnerability	18 Jul 202215:12	–	thn
NVD	CVE-2021-24284	14 May 202112:15	–	nvd
Cvelist	CVE-2021-24284 Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload	14 May 202111:38	–	cvelist

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wpscan	www.wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5
codecanyon	www.codecanyon.net/item/kaswara-modern-visual-composer-addons/19341477
packetstormsecurity	www.packetstormsecurity.com/files/167743/WordPress-Kaswara-Modern-WPBakery-Page-Builder-3.0.1-File-Upload.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2021 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS27.5

CVSS39.8

EPSS0.91328