Aller au contenu
Se connecter
Non notée

CVE-2021-24311 The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to…

Description

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

Produits et versions touchés

Produit Versions touchées Corrigé en
External Media 1.0 premières → < 1.0.34 1.0.34

Autres CVE de External Media

Les 2 CVE de External Media →
CVE-2022-3832 The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow… 4.8 Moyenne
Suivre cette CVE