Aller au contenu
Se connecter
8.8 Élevée

CVE-2024-12848 The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on…

Description

The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible.

Produits et versions touchés

Produit Versions touchées Corrigé en
SKT Page Builder 4.7 premières → 4.7 Pas de correctif indiqué

Autres CVE de SKT Page Builder

Les 3 CVE de SKT Page Builder →
CVE-2025-54005 Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly… 4.3 Moyenne CVE-2024-1337 The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… 4.3 Moyenne
Suivre cette CVE