CVE-2024-6486

ALTO 7.2CVE-2024-6486 · Published 15/05/2025 · updated 17/06/2026

In breve

CVE-2024-6486 è una vulnerabilità ALTO (CVSS 7.2) che riguarda imagemagick engine (orangelab).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 83.8% delle vulnerabilità.
Correzione: aggiornare a 1.7.11 o successiva.

Package	Affected versions	Patched versions
imagemagick engine orangelab	`< 1.7.11`	`1.7.11`

Description

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "cli_path" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code execution.

References

wpscan.com/vulnerability/a57c0c59-8b5c-4221-a9db-19f141650d9b · Exploit

Altre vulnerabilità di imagemagick engine

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free