CVE-2024-39639: WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability
Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39639?
CVE-2024-39639 is classified as a Broken Access Control vulnerability, indicating a significant security risk.
How do I fix CVE-2024-39639?
To remediate CVE-2024-39639, update the WordPress File Upload plugin to the latest version beyond 4.24.7.
What software is affected by CVE-2024-39639?
CVE-2024-39639 affects the WordPress File Upload plugin from versions prior to 4.24.7.
What type of vulnerability is CVE-2024-39639?
CVE-2024-39639 is a Broken Access Control vulnerability that leads to misuse of access security configurations.
What can an attacker achieve by exploiting CVE-2024-39639?
An attacker exploiting CVE-2024-39639 can gain unauthorized access to sensitive functionalities due to incorrectly configured access control.