CVE-2021-4436
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2021-4436 is a critical cyber vulnerability that affects the 3DPrint Lite WordPress plugin before version 1.9.1.5. The vulnerability allows unauthenticated users to upload arbitrary files to the web server without any authorization or file checking in place. However, there is a .htaccess file that prevents access to the uploaded files on servers such as Apache. This vulnerability poses a high risk to organizations as it can lead to unauthorized access and potential compromise of sensitive data. The base severity score for this vulnerability is 9.8 out of 10, indicating its critical nature. To remediate this vulnerability, users should update their plugin to the latest version and ensure proper authorization and file validation mechanisms are in place for file uploads.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions