CVE-2024-38734 WordPress Import Spreadsheets from Microsoft Excel plugin <= 10.1.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4...

CVE-2024-38734

CVE-2024-38734 affects the WordPress plugin Import Spreadsheets from Microsoft Excel (

WordPress Import Spreadsheets from Microsoft Excel Plugin <= 10.1.4 is vulnerable to Arbitrary File Upload

Software Import Spreadsheets from Microsoft Excel Type Plugin Vulnerable versions = 10.1.4 Fixed in 10.1.5 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-38734 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 2c69040b9cb5 Credits Peng Zho...