CVE-2024-32954

CVE-2024-32954 is an Unrestricted Upload of File with Dangerous Type vulnerability in Tribulant Newsletters (WordPress Newsletters plugin). Connected sources confirm the issue affects Newsletters versions up to 4.9.5 and describe it as an unrestricted file upload flaw that could allow an attacker...

WordPress Newsletters Plugin <= 4.9.5 is vulnerable to Arbitrary File Upload

Software Newsletters Type Plugin Vulnerable versions = 4.9.5 Fixed in 4.9.6 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-32954 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID a5967c6d63a9 Credits Peng Zhou Required privilege Administrator...