CVE-2024-11265

🗓️ 23 Nov 2024 06:15:18Reported by [email protected]Type

The WordPress plugin "Increase Maximum Upload File Size | Increase Execution Time" up to version 1.1.3 is vulnerable to Full Path Disclosure, allowing authenticated attackers to retrieve the full path of the web application

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-11265	23 Nov 202405:43	–	circl
CNNVD	WordPress plugin Wp Maximum Upload File Size 信息泄露漏洞	23 Nov 202400:00	–	cnnvd
CVE	CVE-2024-11265	23 Nov 202405:40	–	cve
Cvelist	CVE-2024-11265 Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure	23 Nov 202405:40	–	cvelist
EUVD	EUVD-2024-33768	3 Oct 202520:07	–	euvd
Patchstack	WordPress Wp Maximum Upload File Size plugin <= 1.1.3 - Authenticated (Author+) Full Path Disclosure vulnerability	22 Nov 202421:41	–	patchstack
Patchstack	WordPress Download Increase Maximum Upload File Size \| Increase Execution Time Plugin <= 1.1.3 is vulnerable to Sensitive Data Exposure	22 Nov 202400:00	–	patchstack
Positive Technologies	PT-2024-16872 · WordPress · Increase Maximum Upload File Size \| Increase Execution Time Plugin For Wordpress	22 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-11265	23 May 202507:05	–	redhatcve
Vulnrichment	CVE-2024-11265 Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure	23 Nov 202405:40	–	vulnrichment

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/tags/1.1.2/inc/class-wmufs-chunk-files.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e49e7cdf-93ca-415f-ba83-986cbb869220
plugins	www.plugins.trac.wordpress.org/browser/wp-maximum-upload-file-size/trunk/inc/class-wmufs-chunk-files.php
plugins	www.plugins.trac.wordpress.org/changeset/3191874/

15 Apr 2026 00:35Current

CVSS 3.14.3

EPSS0.00388

CWE-200