Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jw3q-hfmw-wpqw

Опубликовано: 15 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

EPSS

Процентиль: 45%
0.00227
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
почти 2 года назад

The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

EPSS

Процентиль: 45%
0.00227
Низкий

6.5 Medium

CVSS3