Skip to content
Not rated

CVE-2021-24240 The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its…

Description

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.

Affected products and versions

Product Affected versions Fixed in
Business Hours Pro 5.5.0 No fix stated
Track this CVE