Lucene search

K
wpvulndbWpvulndbWPVDB-ID:ACE148A6-E018-478A-A658-D5064D909864
HistoryDec 15, 2023 - 12:00 a.m.

E2Pdf < 1.20.26 - Admin+ Arbitrary File Upload

2023-12-1500:00:00
wpscan.com
14
e2pdf
plugin
admin
file upload
vulnerability

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.7%

Description The plugin does not properly validate upload files via the import_action() function, allowing users having access to the plugin (by default admin) to upload arbitrary files

CPENameOperatorVersion
eq1.20.26

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.7%

Related for WPVDB-ID:ACE148A6-E018-478A-A658-D5064D909864