CVE-2024-43249: WordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerability
Published Aug 19, 2024
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.
Affected Software
1 affected component
Bitapps Bit Form Wordpress<=2.6.4
Event History
Aug 19, 2024
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43249?
CVE-2024-43249 is considered a high severity vulnerability due to its potential for command injection through unrestricted file uploads.
2
How do I fix CVE-2024-43249?
To fix CVE-2024-43249, update your Bit Form Pro plugin to version 2.6.5 or later.
3
What versions of Bit Form Pro are affected by CVE-2024-43249?
CVE-2024-43249 affects all versions of Bit Form Pro up to and including 2.6.4.
4
What type of vulnerability is CVE-2024-43249?
CVE-2024-43249 is categorized as an unrestricted file upload vulnerability, allowing command injection.
5
Who is impacted by CVE-2024-43249?
Users of the Bit Form Pro plugin for WordPress prior to version 2.6.5 are impacted by CVE-2024-43249.