CVE-2024-10820
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 13, 2024
CWE ID 434
Summary
CVE-2024-10820: A critical vulnerability affects the WooCommerce Upload Files plugin for WordPress. The issue stems from a lack of file type validation in the upload_files() function. Unauthenticated attackers can exploit this flaw to upload arbitrary files onto the affected server, potentially enabling remote code execution. This vulnerability has been reported in all versions up to and including 84.3. WordPress site owners must update their plugin as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.