Lucene search
WPScanCVELIST:CVE-2021-24123HistoryMar 18, 2021 - 2:57 p.m.
CVE-2021-24123 PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
2021-03-1814:57:47
CWE-434
WPScan
www.cve.org
arbitrary file upload
powerpress
wordpress plugin
rce
cve-2021-24123
authenticated
file upload
EPSS
0.001
Percentile
44.4%
Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE.
CNA Affected
[
{
"product": "PowerPress",
"vendor": "Unknown",
"versions": [
{
"lessThan": "8.3.8",
"status": "affected",
"version": "8.3.8",
"versionType": "custom"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2021-03-18 15:15:00
wpvulndb
wpvulndb
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
2020-10-11 00:00:00
wpexploit
wpexploit
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
2020-10-11 00:00:00
nvd
nvd
CVE-2021-24123
2021-03-18 15:15:13
cve
cve
CVE-2021-24123
2021-03-18 15:15:13