CVE-2024-50420: WordPress aDirectory plugin <= 1.3 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in aDirectory aDirectory adirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through <= 1.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50420?
CVE-2024-50420 has been classified with a high severity due to the potential for arbitrary file uploads, allowing attackers to upload a web shell.
How do I fix CVE-2024-50420?
To resolve CVE-2024-50420, update your aDirectory plugin to version 1.4 or later, as the vulnerability is present in versions up to and including 1.3.
What types of files are vulnerable in CVE-2024-50420?
CVE-2024-50420 allows the upload of files with dangerous types, specifically web shells that can be executed on the server.
Which software is affected by CVE-2024-50420?
CVE-2024-50420 affects the aDirectory plugin for WordPress versions up to and including 1.3.
Can CVE-2024-50420 lead to server compromise?
Yes, if exploited, CVE-2024-50420 can lead to server compromise through unauthorized file uploads that allow execution of malicious scripts.