Lucene search
PatchstackCVELIST:CVE-2024-25909HistoryFeb 26, 2024 - 3:28 p.m.
CVE-2024-25909 WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload
2024-02-2615:28:57
CWE-434
Patchstack
www.cve.org
3
wordpress
media folder
arbitrary file upload
vulnerability
joomunited
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0
Percentile
9.0%
Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "WP Media folder",
"vendor": "JoomUnited",
"versions": [
{
"changes": [
{
"at": "5.7.3",
"status": "unaffected"
}
],
"lessThanOrEqual": "5.7.2",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
WP Media folder < 5.7.3 - Authenticated (Subscriber+) Arbitrary File Upload
2024-03-22 00:00:00
nvd
nvd
CVE-2024-25909
2024-02-26 16:27:59
prion
prion
Unrestricted file upload
2024-02-26 16:27:00
vulnrichment
vulnrichment
cve
cve
CVE-2024-25909
2024-02-26 16:27:59
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2024-25909