Lucene search
WPScanCVELIST:CVE-2024-3112HistoryJul 12, 2024 - 6:00 a.m.
CVE-2024-3112 Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload
2024-07-1206:00:05
WPScan
www.cve.org
4
cve-2024-3112
quotes and tips
admin
arbitrary file upload
wordpress
bestwebsoft
multisite
EPSS
0
Percentile
14.5%
The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Quotes and Tips by BestWebSoft",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.45"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-3112
2024-07-12 06:15:03
vulnrichment
vulnrichment
CVE-2024-3112 Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload
2024-07-12 06:00:05
cve
cve
CVE-2024-3112
2024-07-12 06:15:03