CVE-2024-5807

Katalog CVE

CVSS 7.2 · High EPSS 0,65%

Kerentanan pada esterox business card. Skor CVSS 3.1 7.2 (High) menurut CISA ADP.

Deskripsi (NVD)

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.

Rincian

Terbit di NVD

30 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/badb16b5-8c06-4170-b605-ea7af8982c1f/ exploit · advisory pihak ketiga