Back to search
CVE-2021-24248
Published: May 5, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
| Vendor | Product | Versions |
|---|---|---|
Business Directory Team | Business Directory Plugin – Easy Listing Directories for WordPress | affected 5.11.1 - < 5.11.1 |
Weaknesses (CWE)
References
https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now