Логотип exploitDog
bind:CVE-2024-8699
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8699

Количество 2

Количество 2

nvd логотип

CVE-2024-8699

9 месяцев назад

The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-m7mh-68hv-jwrj

9 месяцев назад

The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-8699

The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
0%
Низкий
9 месяцев назад
github логотип
GHSA-m7mh-68hv-jwrj

The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
0%
Низкий
9 месяцев назад

Уязвимостей на страницу