3 matches found
CVE-2024-4345: Unrestricted Upload of File with Dangerous Type
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it possible for unauthenticated attacke...
9.8CVSS9.1AI score0.01456EPSS
SaveExploits0References1
20