CVE-2024-31114

🗓️ 31 Mar 2024 18:07:16Reported by PatchstackType

cve🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

Unrestricted Upload of File with Dangerous Type in biplob018 Shortcode Addons. Affecting versions n/a through 3.2.5

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for CVE-2024-31114	25 Mar 202500:12	–	githubexploit
Circl	CVE-2024-31114	25 Mar 202504:00	–	circl
CNNVD	WordPress Plugin Shortcode Addons 代码问题漏洞	31 Mar 202400:00	–	cnnvd
Cvelist	CVE-2024-31114 WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability	31 Mar 202418:07	–	cvelist
NVD	CVE-2024-31114	31 Mar 202418:15	–	nvd
Packet Storm News	WordPress Shortcode Addons 3.2.5 Shell Upload	25 Mar 202500:00	–	packetstormnews
Patchstack	WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability	29 Mar 202412:25	–	patchstack
Patchstack	WordPress Shortcode Addons Plugin <= 3.2.5 is vulnerable to Arbitrary File Upload	29 Mar 202400:00	–	patchstack
Positive Technologies	PT-2024-23784 · Unknown · Shortcode Addons	31 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-31114	5 Feb 202500:24	–	redhatcve

Vulners

Vulnrichment

Node

biplob018 shortcode_addonsRange≤3.2.5wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "shortcode-addons",
    "product": "Shortcode Addons",
    "vendor": "biplob018",
    "versions": [
      {
        "lessThanOrEqual": "3.2.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/shortcode-addons/wordpress-shortcode-addons-3-2-5-arbitrary-file-upload-vulnerability

Parameter	Position	Path	Description	CWE
cmd	query param	wp-content/uploads/shortcode-addons/nxploit.php	Uploaded PHP shell used for command execution (RCE via web shell).	CWE-434

28 Apr 2026 19:24Current

8.6High risk

Vulners AI Score8.6

CVSS 3.19.1

EPSS0.4866

SSVC

CWE-434