Lucene search

K

CVE-2024-11150 WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion

🗓️ 13 Nov 2024 04:07:29Reported by WordfenceType 
vulnrichment
 vulnrichment
🔗 github.com👁 1 Views

WordPress User Extra Fields plugin vulnerable to unauthenticated arbitrary file deletion due to insufficient file path validation, up to version 16.6

Show more
Related
Affected
Refs
[
  {
    "cpes": [
      "cpe:2.3:a:vanquish:wordpress_user_extra_fields:*:*:*:*:*:*:*:*"
    ],
    "vendor": "vanquish",
    "product": "wordpress_user_extra_fields",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "16.6"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo