CVE-2021-24160

In the Reponsive Menu free and Pro WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and...

CVE-2021-24160 Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload

In the Reponsive Menu free and Pro WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and...

CVE-2021-24160

CVE-2021-24160 affects the WordPress plugin “Reponsive Menu” (free and Pro) up to version 4.0.3. The issue is an authenticated arbitrary file upload: a subscriber can upload a ZIP containing PHP files that are extracted to the /rmp-menu/ directory (and possibly /rmp-menu/themes/ in some contexts)...