CVE-2024-13418: Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in…

PriorityP261high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.60%

44.0th percentile

Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
g5plus	april	<= 5.1	—
g5plus	auteur	<= 7.1	—
g5plus	benaa	<= 4.0.0	—
g5plus	beyot	<= 6.0.6	—
g5theme	april_framework	<= 5.1	—
g5theme	auteur_framework	<= 7.1	—
g5theme	benaa_framework	<= 4.0.0	—
g5theme	beyot_framework	<= 6.0.6	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.