CVE-2024-54291: WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass pluginpass-pro-plugintheme-licensing allows Manipulating Web Input to File System Calls.This issue affects PluginPass: from n/a through <= 0.9.10.
Other sources
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound PluginPass allows Manipulating Web Input to File System Calls. This issue affects PluginPass: from n/a through 0.9.10.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54291?
CVE-2024-54291 is classified as a critical vulnerability due to its impact on file system security.
How do I fix CVE-2024-54291?
To fix CVE-2024-54291, update the PluginPass plugin to version 0.9.11 or later.
What types of attacks can be performed using CVE-2024-54291?
CVE-2024-54291 allows attackers to exploit path traversal vulnerabilities to access sensitive files on the server.
Which versions of PluginPass are affected by CVE-2024-54291?
CVE-2024-54291 affects PluginPass versions from earlier releases up to and including 0.9.10.
Is CVE-2024-54291 related to any specific platforms?
CVE-2024-54291 is specifically related to the PluginPass plugin in WordPress.