CVE-2021-24311CWE-434

External Media < 1.0.34 - Authenticated Arbitrary File Upload

published June 1, 2021

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01775 · 78.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2021-06-01T11:33Z
EPSS history
Timeline
  • 01 JUN 11:33Z
    External Media < 1.0.34 - Authenticated Arbitrary File Upload
    cvelistv5