cbcvebase.

Williewonka Imagements vulnerabilities

1 known vulnerability affecting williewonka/imagements.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-24236P2CRITICALCVSS 9.8PoC≥ 1.2.5, ≤ 1.2.52021-05-06
CVE-2021-24236 [CRITICAL] CWE-434 CVE-2021-24236: The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
nvd
Williewonka Imagements vulnerabilities | cvebase