CVE-2024-5080 — Unrestricted File Upload in WP Emember

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.9%
top 24.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tipsandtricks-hq WP Emember
Timeline
PublishedJul 13

Description

The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-j46j-mv29-6g5r: The wp-eMember WordPress plugin before 10↗2024-07-13
▶
CVEList
WP eMember < 10.6.6 - Admin+ Arbitrary File Upload↗2024-07-13
▶
CVE-2024-5080 — Unrestricted File Upload in WP Emember | cvebase