Lucene search

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion

🗓️ 08 Dec 2024 05:16:25Reported by WordfenceType

WP Umbrella plugin versions up to 2.17.0 allow unauthenticated Local File Inclusion vulnerability.

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2024-12209	8 Dec 202406:15	–	nvd
Cvelist	CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion	8 Dec 202405:25	–	cvelist
CVE	CVE-2024-12209	8 Dec 202406:15	–	cve
Nuclei	WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion	9 Dec 202419:05	–	nuclei
OpenVAS	WordPress Multiple Plugins / Themes Directory Traversal / File Download Vulnerability (HTTP)	20 Nov 202000:00	–	openvas
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:wphealth:wp_umbrella_update_backup_restore_and_monitoring:*:*:*:*:*:*:*:*"
    ],
    "vendor": "wphealth",
    "product": "wp_umbrella_update_backup_restore_and_monitoring",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "2.17.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-health/tags/v2.16.4/src/Actions/RestoreRouter.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c74ce3e8-cab9-4cc6-a1ad-1e51f7268474
plugins	www.plugins.trac.wordpress.org/changeset

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2024 05:25Current

8High risk

Vulners AI Score8

CVSS39.8

EPSS0.029

SSVC

CWE-98