CVE-2024-50480: WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50480?
CVE-2024-50480 is considered a high severity vulnerability due to the potential exploitation for remote code execution.
How do I fix CVE-2024-50480?
To fix CVE-2024-50480, upgrade AZEXO Marketing Automation to a version higher than 1.27.80.
What type of vulnerability is CVE-2024-50480?
CVE-2024-50480 is classified as an Unrestricted Upload of File with Dangerous Type vulnerability.
What can attackers do with CVE-2024-50480?
Attackers can upload a web shell to the server, potentially allowing them to execute arbitrary commands.
Which versions of AZEXO Marketing Automation are affected by CVE-2024-50480?
CVE-2024-50480 affects all versions of AZEXO Marketing Automation from n/a through 1.27.80.