CVE-2021-24311

The wpajaxupload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users...

CVE-2021-24311 External Media < 1.0.34 - Authenticated Arbitrary File Upload

The wpajaxupload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users...

CVE-2021-24311

The External Media WordPress plugin, in versions prior to 1.0.34 , is vulnerable to an authenticated arbitrary file upload vulnerability. The flaw exists within the wp_ajax_upload-remote-file AJAX action, allowing any authenticated user to upload files to the server. This vulnerability can lead t...