CVE-2024-11613

概要

参考情報

• abrahack.com/posts/wp-file-upload-rce-part2
• plugins.svn.wordpress.org/wp-file-upload/trunk/wfu_file_downloader.php · Product
• plugins.trac.wordpress.org/changeset/3217005 · Patch
• wordfence.com/threat-intel/vulnerabilities/id/31052fe6-a0ae-4502-b2d2-dbc3b3bf672f · Third Party Advisory

wordpress file upload のその他の脆弱性

• CVE-2024-13494中 4.3The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. Thi…
• CVE-2024-9939高 7.5The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_do…
• CVE-2024-11635緊急 9.8The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the …
• CVE-2024-12719中 4.3The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_aj…
• CVE-2024-39639低 3.5Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Secur…