CVE-2024-24714

Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4...

CVE-2024-24714

CVE-2024-24714 affects the WordPress Icons Font Loader plugin (bPlugins) up to version 1.1.4, with an Unrestricted Upload of File with Dangerous Type vulnerability. Root cause: unrestricted file uploads of dangerous types. Impact per sources: HIGH (CVSS 3.1 7.2) including potential compromise via...

WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload

Software Icons Font Loader Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-24714 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 8add145a8567 Credits Vulzap Required privilege Administrator...