Skip to content
Sign in
Not rated

CVE-2021-24224 The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to…

Description

The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE.

Affected products and versions

Product Affected versions Fixed in
Easy Form Builder 1.0 No fix stated

Other CVEs of Easy Form Builder

The 2 CVEs of Easy Form Builder →
CVE-2022-3906 The Easy Form Builder WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow… 4.8 Medium
Track this CVE