CVE-2024-13720

Summary

CVE-2024-13720 is a vulnerability affecting the WP Image Uploader plugin for WordPress. The issue lies in the gky_image_uploader_main_function() function, which fails to properly validate file paths during image uploads. As a result, unauthenticated attackers can delete arbitrary files on the server, potentially leading to serious consequences such as remote code execution when critical files like wp-config.php are targeted. All versions up to and including 1.0.1 are impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.