WordPress Plugin CubeWP 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

PT-2024-23427 · Cubewp · Cubewp

Name of the Vulnerable Software and Affected Versions: CubeWP – All-in-One Dynamic Content Framework versions 1.1.12 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the CubeWP – All-in-One Dynamic Content Framework. Recommendation...

WordPress CubeWP – All-in-One Dynamic Content Framework Plugin <= 1.1.12 is vulnerable to Arbitrary File Upload

Software CubeWP – All-in-One Dynamic Content Framework Type Plugin Vulnerable versions = 1.1.12 Fixed in 1.1.13 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-30500 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 46eee47f3899 Credits Peng Zh...