CVE-2024-11265

🗓️ 23 Nov 2024 05:40:11Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 45 Views

The Increase Maximum Upload File Size plugin for WordPress up to version 1.1.3 is vulnerable to Full Path Disclosure, allowing authenticated attackers to retrieve the full path of the web application

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-11265	23 Nov 202405:43	–	circl
CNNVD	WordPress plugin Wp Maximum Upload File Size 信息泄露漏洞	23 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11265 Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure	23 Nov 202405:40	–	cvelist
EUVD	EUVD-2024-33768	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11265	23 Nov 202406:15	–	nvd
Patchstack	WordPress Wp Maximum Upload File Size plugin <= 1.1.3 - Authenticated (Author+) Full Path Disclosure vulnerability	22 Nov 202421:41	–	patchstack
Patchstack	WordPress Download Increase Maximum Upload File Size \| Increase Execution Time Plugin <= 1.1.3 is vulnerable to Sensitive Data Exposure	22 Nov 202400:00	–	patchstack
Positive Technologies	PT-2024-16872 · WordPress · Increase Maximum Upload File Size \| Increase Execution Time Plugin For Wordpress	22 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-11265	23 May 202507:05	–	redhatcve
Vulnrichment	CVE-2024-11265 Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure	23 Nov 202405:40	–	vulnrichment

Vulners

Node

[
  {
    "vendor": "codepopular",
    "product": "EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e49e7cdf-93ca-415f-ba83-986cbb869220
plugins	www.plugins.trac.wordpress.org/changeset/3191874/
plugins	www.plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/tags/1.1.2/inc/class-wmufs-chunk-files.php
plugins	www.plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/trunk/inc/class-wmufs-chunk-files.php

15 Apr 2026 00:35Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.14.3

EPSS0.00388

SSVC

CWE-200