Lucene search
K

CVE-2021-24377

🗓️ 21 Jun 2021 19:18:23Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 68 Views🌐 WEB

Autoptimize WordPress plugin before 2.7.8 insufficient protection from RCE due to race condition

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-24377
22 Jun 202100:15
circl
CNNVD
WordPress 竞争条件问题漏洞
21 Jun 202100:00
cnnvd
Cvelist
CVE-2021-24377 Autoptimize < 2.7.8 - Race Condition leading to RCE
21 Jun 202119:18
cvelist
EUVD
EUVD-2021-11289
7 Oct 202500:30
euvd
NVD
CVE-2021-24377
21 Jun 202120:15
nvd
OpenVAS
WordPress Autoptimize Plugin < 2.7.8 Multiple Vulnerabilities
24 Jun 202200:00
openvas
Patchstack
WordPress Autoptimize plugin <= 2.7.7 - Race Condition leading to Remote Code Execution (RCE) vulnerability
9 Oct 202000:00
patchstack
Prion
Race condition
21 Jun 202120:15
prion
RedhatCVE
CVE-2021-24377
22 May 202519:21
redhatcve
wpexploit
Autoptimize < 2.7.8 - Race Condition leading to RCE
9 Oct 202000:00
wpexploit
Rows per page
NVD
Vulners
Node
autoptimizeautoptimizeRange<2.7.8wordpress
[
  {
    "product": "Autoptimize",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.7.8",
        "status": "affected",
        "version": "2.7.8",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
pagequery paramwp/wp-admin/options-general.phpArchive upload via Import Settings feature enabling race condition between extraction and removal during processing of the uploaded archiveCWE-362

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:52Current
7.2High risk
Vulners AI Score7.2
CVSS 26.8
CVSS 3.18.1
EPSS0.00485
68