Lucene search
HistoryJun 07, 2024 - 6:15 a.m.
CVE-2024-4620
cve-2024-4620
wordpress
form builder
unauthenticated users
file modification
php code
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form
Related
wpexploit
wpexploit
ArForms < 6.6 - Unauthenticated RCE
2024-05-17 00:00:00
vulnrichment
vulnrichment
CVE-2024-4620 ArForms < 6.6 - Unauthenticated RCE
2024-06-07 06:00:02
wpvulndb
wpvulndb
ArForms < 6.6 - Unauthenticated RCE
2024-05-17 00:00:00
cve
cve
CVE-2024-4620
2024-06-07 06:15:11
cvelist
cvelist
CVE-2024-4620 ArForms < 6.6 - Unauthenticated RCE
2024-06-07 06:00:02
wordfence
wordfence
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-4620