CVE-2024-11635

概要

参考情報

• abrahack.com/posts/wp-file-upload-rce-part1
• plugins.svn.wordpress.org/wp-file-upload/trunk/wfu_file_downloader.php · Product
• wordfence.com/threat-intel/vulnerabilities/id/b5165f60-6515-4a2c-a124-cc88155eaf01 · Third Party Advisory

wordpress file upload のその他の脆弱性

• CVE-2024-13494中 4.3The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. Thi…
• CVE-2024-9939高 7.5The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_do…
• CVE-2024-11613緊急 9.8The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in a…
• CVE-2024-12719中 4.3The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_aj…
• CVE-2024-39639低 3.5Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Secur…