CVE-2024-49607

CRITICO 9.8CVE-2024-49607 · Published 20/10/2024 · updated 17/06/2026

In breve

CVE-2024-49607 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda wp dropbox dropins (redwanhilali).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 64.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
wp dropbox dropins redwanhilali	`≤ 1.0`	No fix yet

Description

Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through <= 1.0.

References

patchstack.com/database/Wordpress/Plugin/wp-dropbox-dropins/vulnerability/wordpress-wp-dropbox-dropins-plugin-1-0-arbitrary-file-upload-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free