Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming. Capability checks missing in phoenix_media_rename AJAX action allows Author role to rename any uploaded media files
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
Patchstack | WordPress Phoenix Media Rename plugin <= 3.4.2 - Arbitrary Media File Renaming vulnerability | 6 Oct 202100:00 | – | patchstack |
Cvelist | CVE-2021-24816 Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming | 8 Nov 202117:35 | – | cvelist |
wpexploit | Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming | 6 Oct 202100:00 | – | wpexploit |
NVD | CVE-2021-24816 | 8 Nov 202118:15 | – | nvd |
CVE | CVE-2021-24816 | 8 Nov 202118:15 | – | cve |
CNVD | WordPress Plugin Access Control Error Vulnerability (CNVD-2021-101476) | 10 Nov 202100:00 | – | cnvd |
Prion | Buffer overflow | 8 Nov 202118:15 | – | prion |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo