Skip to content
Sign in
Not rated

CVE-2021-24160 In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing…

Description

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and ultimately allow an attacker to execute commands to further infect a WordPress site.

Affected products and versions

Product Affected versions Fixed in
Responsive Menu – Create Mobile-Friendly Menu 4.0 earliest → < 4.0.4 4.0.4
Responsive Menu Pro 4.0 earliest → < 4.0.4 4.0.4

Other CVEs of Responsive Menu – Create Mobile-Friendly Menu

The 3 CVEs of Responsive Menu – Create Mobile-Friendly Menu →
CVE-2021-24161 In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an… Not rated CVE-2021-24162 In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an… Not rated
Track this CVE