EUVD-2021-11405

Malware in sbrugna...

CVE-2021-24493

The shoppuploadfile AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such as PHP, allowing unauthenticated users to upload arbitrary files and leading t...

CVE-2021-24493

The CVE-2021-24493 entry describes a vulnerability in the Shopp WordPress plugin (≤1.4) where the shopp_upload_file AJAX action allows unauthenticated and authenticated users to upload arbitrary files (e.g., PHP shells) without security checks, enabling remote code execution. The available connec...