CVE-2021-24160: Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and ultimately allow an attacker to execute commands to further infect a WordPress site.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-24160.
What is the affected software?
The affected software is the Reponsive Menu (free and Pro) WordPress plugins before version 4.0.4.
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 8.8.
How can this vulnerability be exploited?
This vulnerability can be exploited by uploading malicious PHP files through zip archives to the /rmp-menu/ directory and then accessing them through the front end of the site, leading to remote code execution.
Are there any fixes or patches available for this vulnerability?
Yes, there are patches available for this vulnerability. It is recommended to update the Reponsive Menu plugins to version 4.0.4 or later.