CVE-2024-12252

CVE-2024-12252 SEO LAT Auto Post = 2.2.1 - 缺少授权导致文件覆盖/上传（远程代码执行） 描述 WordPress 的 SEO LAT Auto Post 插件在 2.2.1 及之前的所有版本中，由于 remoteupdate AJAX 操作缺少权限检查，因此存在文件覆盖漏洞。这使得未认证的攻击者能够覆盖 seo-beginner-auto-post.php 文件，并借此实现远程代码执行。 详细信息 类型 ：plugin Slug ：seo-beginner-auto-post 受影响版本 ：2.2.1 CVSS 分数 ：9.8 CVSS 评级 ：...

Exploit for CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Remote Code Execution Descrip...

CVE-2024-12252

The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can...

CVE-2024-12252

The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can...

CVE-2024-12252

The CVE-2024-12252 entry concerns the WordPress plugin SEO LAT Auto Post (versions up to 2.2.1). A missing capability check on the remote_update AJAX action allows unauthenticated attackers to overwrite the seo-beginner-auto-post.php file, enabling remote code execution. Related connected documen...

CVE-2024-12252 SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can...