CVE-2021-24962: WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE
The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can then be used to upload a PHP code disguised as an image inside the auto-loaded directory of the plugin, resulting in arbitrary code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-24962?
CVE-2021-24962 is a vulnerability found in the WordPress File Upload Free and Pro WordPress plugins before version 4.16.3.
What is the severity of CVE-2021-24962?
The severity of CVE-2021-24962 is high, with a CVSS score of 8.8.
How does CVE-2021-24962 affect the WordPress File Upload plugins?
CVE-2021-24962 allows users with a role as low as Contributor to perform path traversal and upload malicious PHP code disguised as an image within the plugin's directory.
Which versions of the WordPress File Upload plugins are affected by CVE-2021-24962?
Versions of the WordPress File Upload plugins up to and excluding 4.16.3 are affected by CVE-2021-24962.
How can I fix CVE-2021-24962 in the WordPress File Upload plugins?
To fix CVE-2021-24962, update the WordPress File Upload plugins to version 4.16.3 or later.