Lucene search
PRIOn knowledge basePRION:CVE-2021-34639HistoryAug 05, 2021 - 9:15 p.m.
Unrestricted file upload
2021-08-0521:15:00
PRIOn knowledge base
www.prio-n.com
2
Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. “payload.php.png” which is executable in some configurations. This issue affects: WordPress Download Manager version 3.1.24 and prior versions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress_download_manager | le | 3.1.24 |
Related
patchstack
patchstack
cvelist
cvelist
cve
cve
CVE-2021-34639
2021-08-05 21:15:12
wpvulndb
wpvulndb
WordPress Download Manager < 3.1.25 - Authenticated File Upload
2021-07-29 00:00:00
nvd
nvd
CVE-2021-34639
2021-08-05 21:15:12
wordfence
wordfence
Multiple Vulnerabilities Patched in WordPress Download Manager
2021-07-29 16:13:58