cbcvebase.

Williamluis Wp-Curriculo Vitae Free vulnerabilities

1 known vulnerability affecting williamluis/wp-curriculo_vitae_free.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-24222P2CRITICALCVSS 9.8≤ 6.32021-04-12
CVE-2021-24222 [CRITICAL] CWE-434 CVE-2021-24222: The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE.
nvd
Williamluis Wp-Curriculo Vitae Free vulnerabilities | cvebase