CVE-2024-49676

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

CVE-2024-49676

CVE-2024-49676 affects the WordPress plugin Custom Icons for Elementor up to version 0.3.3. It is an Unrestricted Upload of File with Dangerous Type vulnerability that allows uploading a Web Shell to the web server. Root cause: insufficient validation for uploaded files in the plugin, enabling ar...

CVE-2024-49676 WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-for-elementor allows Upload a Web Shell to a Web Server.This issue affects Custom Icons for Elementor: from n/a through = 0.3.3...

WordPress Custom Icons for Elementor Plugin <= 0.3.3 is vulnerable to Arbitrary File Upload

Software Custom Icons for Elementor Type Plugin Vulnerable versions = 0.3.3 Fixed in 0.3.4 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49676 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID f3c8312f66dc Credits tahu.datar Required privilege...