CVE-2021-34639CWE-646

WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload

High · published August 5, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager version 3.1.24 and prior versions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00580 · 47.0th percentile
Weakness
CWE-646 · Reliance on File Name or Extension of Externally-Supplied File
Published
2021-08-05T20:18Z
EPSS history
Timeline
  • 05 AUG 20:18Z
    WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload
    cvelistv5