CVE-2024-0380

creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:28+00:00| seen| https://t.me/ctinow/179598 2024-02-12 07:36:24+00:00| seen| https://t.me/ctinow/182925...

CVE-2024-0380

The CVE-2024-0380 entry concerns WP Recipe Maker for WordPress, where Directory Traversal was possible in all versions up to 9.1.0 via the icon attribute in Shortcodes. Authenticated attackers with contributor-level access and above could include SVG file contents from the server, enabling Cross-...