CVE-2024-9422: GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload
The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9422?
CVE-2024-9422 is classified as a high severity vulnerability due to the risk of arbitrary file uploads on the server.
How do I fix CVE-2024-9422?
To fix CVE-2024-9422, update the GEO my WP plugin to version 4.5 or later and the gmw-premium-settings plugin to version 3.1 or later.
What are the potential impacts of CVE-2024-9422?
The potential impacts of CVE-2024-9422 include unauthorized access to server files and execution of malicious PHP scripts.
Which WordPress plugins are affected by CVE-2024-9422?
CVE-2024-9422 affects the GEO my WP plugin versions before 4.5 and the gmw-premium-settings plugin before 3.1.
How can I determine if my site is vulnerable to CVE-2024-9422?
You can determine if your site is vulnerable to CVE-2024-9422 by checking the installed versions of the GEO my WP and gmw-premium-settings plugins against the affected versions.