Lucene search

CVE-2024-8538

🗓️ 07 Sep 2024 09:03:15Reported by [email protected]Type

The Big File Uploads plugin for WordPress (CVE-2024-8538) allows full path disclosure, potentially aiding other attacks

Reporter	Title	Published	Views	Family All 6
OSV	CVE-2024-8538	7 Sep 202409:15	–	osv
Vulnrichment	CVE-2024-8538 Big File Uploads <= 2.1.2 - Authenticated (Author+) Full Path Disclosure	7 Sep 202408:37	–	vulnrichment
CVE	CVE-2024-8538	7 Sep 202409:15	–	cve
Patchstack	WordPress Big File Uploads Plugin <= 2.1.2 is vulnerable to Full Path Disclosure (FPD)	9 Sep 202400:00	–	patchstack
Cvelist	CVE-2024-8538 Big File Uploads <= 2.1.2 - Authenticated (Author+) Full Path Disclosure	7 Sep 202408:37	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 2, 2024 to September 8, 2024)	12 Sep 202414:57	–	wordfence

Nvd

Node

infiniteuploads big_file_uploadsRange<2.1.3wordpress

Source	Link
github	www.github.com/uglyrobot/big-file-uploads/blob/master/tuxedo_big_file_uploads.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1bd308a4-7157-4bc6-a55b-c6a4a62510a9
plugins	www.plugins.trac.wordpress.org/changeset/3147755/tuxedo-big-file-uploads/trunk/tuxedo_big_file_uploads.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Sep 2024 09:15Current

CVSS34.3

EPSS0.001