CVE-2024-10820

creationtimestamp| type| source ---|---|--- 2024-11-13 05:48:01+00:00| seen| https://t.me/cvedetector/10795 2026-06-21 20:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mot6czpnkk2j...

CVE-2024-10820 WooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload

The WooCommerce Upload Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles function in all versions up to, and including, 84.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

WordPress WooCommerce Upload Files Plugin <= 84.3 is vulnerable to Arbitrary File Upload

Software WooCommerce Upload Files Type Plugin Vulnerable versions = 84.3 Fixed in 84.4 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-10820 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 2047e0da8994 Credits Tonn Required privilege...