7.2
High
CVE-2024-6486 The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command…
Description
The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "cli_path" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ImageMagick Engine 1.7 | earliest → < 1.7.11 | 1.7.11 |