Lucene search
PRIOn knowledge basePRION:CVE-2021-24947HistoryFeb 07, 2022 - 4:15 p.m.
Cross site request forgery (csrf)
2022-02-0716:15:00
PRIOn knowledge base
www.prio-n.com
5
The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server
| CPE | Name | Operator | Version |
|---|---|---|---|
| responsive_vector_maps | lt | 6.4.2 |
Related
cvelist
cvelist
wpexploit
wpexploit
RVM - Responsive Vector Maps < 6.4.2 - Subscriber+ Arbitrary File Read
2022-01-06 00:00:00
wpvulndb
wpvulndb
RVM - Responsive Vector Maps < 6.4.2 - Subscriber+ Arbitrary File Read
2022-01-06 00:00:00
cve
cve
CVE-2021-24947
2022-02-07 16:15:43
patchstack
patchstack
nvd
nvd
CVE-2021-24947
2022-02-07 16:15:43
nuclei
nuclei
WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read
2022-02-08 01:07:19
kitploit
kitploit
Wpgarlic - A Proof-Of-Concept WordPress Plugin Fuzzer
2022-04-25 21:30:00