Lucene search
+L

WordPress User Profile Builder plugin < 3.11.8 - Unauthenticated Media Upload vulnerability

🗓️ 29 Jul 2024 06:36:49Reported by Michel PrunetType 
patchstack
 patchstack
🔗 patchstack.com👁 32 Views

Unauthenticated media upload in WordPress User Profile Builder below 3.11.8, discovered by Michel Prunet.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Unrestricted Upload of File with Dangerous Type in Cozmoslabs Profile_Builder
2 Feb 202515:37
–githubexploit
circl
Circl
CVE-2024-6366
29 Jul 202408:45
–circl
cnnvd
CNNVD
WordPress Plugin User Profile Builder has a security vulnerability
29 Jul 202400:00
–cnnvd
cve
CVE
CVE-2024-6366
29 Jul 202406:00
–cve
cvelist
Cvelist
CVE-2024-6366 User Profile Builder < 3.11.8 - Unauthenticated Media Upload
29 Jul 202406:00
–cvelist
kitploit
Kitploit
CVE-2024-6366
28 Oct 202614:33
–kitploit
kitploit
Kitploit
CVE-2024-6366-PoC
28 Oct 202618:45
–kitploit
nuclei
Nuclei
User Profile Builder < 3.11.8 - File Upload
30 Oct 202602:04
–nuclei
nvd
NVD
CVE-2024-6366
29 Jul 202406:15
–nvd
osv_cve
osv_cve
CVE-2024-6366
29 Jul 202406:15
–osv_cve
Rows per page
Vulners
Node

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Jul 2024 06:36Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.19.1
EPSS0.28993
SSVC
32