CVE-2024-32809: WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability
Published May 17, 2024
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Files.This issue affects ActiveDEMAND: from n/a through 0.2.41.
Affected Software
2 affected components
JumpDEMAND ActiveDEMAND<=0.2.41
WordPress ActiveDEMAND plugin<=0.2.41
Remediation
Information
Update to 0.2.42 or a higher version.
Event History
May 17, 2024
CVE Published
via MITRE·09:39 AM
Data Sourced
via MITRE·09:39 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-32809?
CVE-2024-32809 is classified as a high severity vulnerability due to its potential for unrestricted file uploads and execution of malicious files.
2
How do I fix CVE-2024-32809?
To fix CVE-2024-32809, update ActiveDEMAND and the ActiveDEMAND WordPress plugin to version 0.2.42 or later.
3
What types of attacks can CVE-2024-32809 facilitate?
CVE-2024-32809 can facilitate attacks such as remote code execution and data breach through the upload of malicious files.
4
Which versions of ActiveDEMAND are affected by CVE-2024-32809?
Versions of ActiveDEMAND from n/a up to and including 0.2.41 are affected by CVE-2024-32809.
5
Is the WordPress ActiveDEMAND plugin vulnerable to CVE-2024-32809?
Yes, the WordPress ActiveDEMAND plugin versions from n/a to 0.2.41 are vulnerable to CVE-2024-32809.