PT-2024-16745 · Tumult · Tumult Hype Animations

🗓️ 28 Nov 2024 00:00:00Reported by Positive TechnologiesType

Tumult Hype Animations WordPress plugin up to 1.9.15 allows arbitrary file uploads via hypeanimations panel, risking remote code execution.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-11082	28 Nov 202409:49	–	circl
CNNVD	WordPress plugin Tumult Hype Animations 代码问题漏洞	28 Nov 202400:00	–	cnnvd
CVE	CVE-2024-11082	28 Nov 202409:47	–	cve
Cvelist	CVE-2024-11082 Tumult Hype Animations <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function	28 Nov 202409:47	–	cvelist
EUVD	EUVD-2024-34059	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11082	28 Nov 202410:15	–	nvd
Patchstack	WordPress Tumult Hype Animations plugin <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function vulnerability	27 Nov 202423:16	–	patchstack
Patchstack	WordPress Tumult Hype Animations Plugin <= 1.9.15 is vulnerable to Arbitrary File Upload	27 Nov 202400:00	–	patchstack
RedhatCVE	CVE-2024-11082	5 Feb 202501:30	–	redhatcve
Vulnrichment	CVE-2024-11082 Tumult Hype Animations <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function	28 Nov 202409:47	–	vulnrichment

Source	Link
osv	www.osv.dev/vulnerability/CVE-2024-11082
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-11082
github	www.github.com/tumult/hype-wordpress-plugin/commit/1702d3d4fd0fae9cb9fc40cdfc3dfb8584d5f04c
wordpress	www.wordpress.org/plugins/tumult-hype-animations/
twitter	www.twitter.com/VulmonFeeds/status/1862224458049569270
t	www.t.me/latest_high_impact_cve/1582
twitter	www.twitter.com/CveFindCom/status/1862074775096426770
plugins	www.plugins.trac.wordpress.org/browser/tumult-hype-animations/trunk/includes/adminpanel.php
plugins	www.plugins.trac.wordpress.org/changeset/3197761
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/be3a0b4b-cce5-4d78-99d5-697f2cf04427

03 Dec 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.9

EPSS0.12182

SSVC