CVE-2024-5450

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

WordPress Bug Library Plugin < 2.1.1 is vulnerable to Remote Code Execution (RCE)

Software Bug Library Type Plugin Vulnerable versions 2.1.1 Fixed in 2.1.1 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-5450 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 5f64af27fea2 Credits Bob Matyas Required privilege Unauthenticat...

CVE-2024-5450

creationtimestamp| type| source ---|---|--- 2024-07-13 08:49:51+00:00| seen| https://t.me/cvedetector/810...

CVE-2024-5450

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

CVE-2024-5450 Bug Library < 2.1.1 - Unauthenticated RCE

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

CVE-2024-5450 Bug Library < 2.1.1 - Unauthenticated RCE

The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files...

CVE-2024-5450

The Bug Library WordPress plugin (versions before 2.1.1 ) contains an unauthenticated Remote Code Execution (RCE) vulnerability. The root cause is a failure to perform file type validation on user-submitted bug reports, which allows an unauthenticated attacker to upload PHP files . Impacted by CW...