Lucene search
HistoryJul 13, 2024 - 6:15 a.m.
CVE-2024-5080
cve
wp-emember
file validation
php
server vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.3%
The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server
Related
cve
cve
CVE-2024-5080
2024-07-13 06:15:04
vulnrichment
vulnrichment
CVE-2024-5080 WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
2024-07-13 06:00:09
cvelist
cvelist
CVE-2024-5080 WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
2024-07-13 06:00:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.3%
Related for NVD:CVE-2024-5080