CVE-2024-30500: WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30500?
CVE-2024-30500 is classified as a high severity vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2024-30500?
To mitigate CVE-2024-30500, upgrade CubeWP – All-in-One Dynamic Content Framework to version 1.1.13 or later.
What software is affected by CVE-2024-30500?
CVE-2024-30500 affects CubeWP – All-in-One Dynamic Content Framework versions up to and including 1.1.12.
Can CVE-2024-30500 be exploited remotely?
Yes, CVE-2024-30500 can be exploited remotely as it allows attackers to upload dangerous file types.
What are the potential risks of CVE-2024-30500?
The risks associated with CVE-2024-30500 include unauthorized file uploads which can lead to code execution and server compromise.