CVE-2024-9047-Exploit

CVE-2024-9047: Exploit for WordPress File Upload Plugin Description The WordPress File Upload plugin for WordPress is vulnerable to a Path Traversal vulnerability in all versions up to, and including, 4.24.11 via the wfufiledownloader.php file. This vulnerability allows unauthenticated attackers ...

CVE-2024-9047

POC - WordPress File Upload 插件，wfufiledownloader.php 文件，版本 = 4.24.11 - CVE-2024-9047 概述 WordPress File Upload 插件由于在 wfufiledownloader.php 文件中存在不当的输入验证而存在漏洞，影响版本 = 4.24.11。该漏洞允许未认证用户从服务器文件系统下载任意文件，从而导致潜在的数据泄露和系统受损。 受影响设备 运行 WordPress 且安装了 File Upload 插件版本 = 4.24.11 的网站。...