Aller au contenu
Se connecter
7.2 Élevée

CVE-2024-8699 The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege…

Description

The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Produits et versions touchés

Produit Versions touchées Corrigé en
Z-Downloads 1.11 premières → < 1.11.5 1.11.5

Autres CVE de Z-Downloads

Les 3 CVE de Z-Downloads →
CVE-2024-8703 The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in… 6.1 Moyenne CVE-2024-8673 The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of… 9.1 Critique
Suivre cette CVE