CVE-2021-24155 Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

🗓️ 05 Apr 2021 18:27:42Reported by WPScanType

WordPress Backup Guard plugin < 1.6.0 allows authenticated arbitrary file uploa

Reporter	Title	Published	Views	Family All 20
0day.today	Wordpress Backup Guard 1.5.8 Plugin - Remote Code Execution (Authenticated) Exploit	5 Jul 202100:00	–	zdt
0day.today	WordPress Backup Guard Authenticated Remote Code Execution Exploit	21 Jul 202100:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Backup-Guard Backup_Guard	30 Jul 202111:28	–	githubexploit
Circl	CVE-2021-24155	10 Jul 202116:29	–	circl
CNNVD	WordPress 代码问题漏洞	5 Apr 202100:00	–	cnnvd
Check Point Advisories	p0wny Shell Remote Code Execution (CVE-2017-9830; CVE-2018-15139; CVE-2018-19423; CVE-2018-6383; CVE-2020-29607; CVE-2021-24155; CVE-2021-24347)	19 Oct 202100:00	–	checkpoint_advisories
CVE	CVE-2021-24155	5 Apr 202118:27	–	cve
Exploit DB	Wordpress Plugin Backup Guard 1.5.8 - Remote Code Execution (Authenticated)	5 Jul 202100:00	–	exploitdb
Metasploit	Wordpress Plugin Backup Guard - Authenticated Remote Code Execution	21 Jul 202117:42	–	metasploit
Nuclei	WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload	14 Jun 202603:03	–	nuclei

[
  {
    "product": "WordPress Backup and Migrate Plugin – Backup Guard",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.6.0",
        "status": "affected",
        "version": "1.6.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/163382/WordPress-Backup-Guard-1.5.8-Shell-Upload.html
wpscan	www.wpscan.com/vulnerability/d442acac-4394-45e4-b6bb-adf4a40960fb
packetstormsecurity	www.packetstormsecurity.com/files/163623/WordPress-Backup-Guard-Authenticated-Remote-Code-Execution.html

21 Jul 2021 17:06Current

7.2High risk

Vulners AI Score7.2

EPSS0.92823

CWE-434