Lucene search
+L

4 matches found

NVD
NVD
added 2021/12/21 9:15 a.m.10 views

CVE-2021-24981

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory...

7.5CVSS0.00811EPSS
SaveExploits2References2
CVE
CVE
added 2021/12/21 8:45 a.m.72 views

CVE-2021-24981

The CVE-2021-24981 entry concerns the WordPress Directorist plugin (versions before 7.0.6.2). It describes a Cross-Site Request Forgery that enables Remote File Upload, leading to arbitrary PHP shell uploads in wp-content/plugins. Impact stated: shell upload and potential full site compromise; re...

7.5CVSS7.6AI score0.00811EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2021/12/21 8:45 a.m.37 views

CVE-2021-24981 Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory...

7.9AI score0.00811EPSS
SaveExploits2References2
VulnCheck KEV
VulnCheck KEV
added 2021/11/16 12:0 a.m.4 views

VulnCheck KEV: CVE-2021-24981

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory...

7.5CVSS7.2AI score0.00811EPSS
SaveExploits2References1
Rows per page
Query Builder