CVE-2021-24240

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability...

CVE-2021-24240

The Business Hours Pro WordPress plugin (version 5.5.0 and prior) contains an unauthenticated arbitrary file upload vulnerability. This issue stems from the plugin's manual update functionality , which allows a remote attacker to upload arbitrary files to the server. Successful exploitation can l...