9.1Kritik

CVE-2024-27951WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability

Themeisle Multiple Page Generator Plugin – MPG; themeisle multiple_page_generator Yayım: (2 yıl önce)

Açıklama

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

Zayıflık türü (CWE): CWE-434

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
themeisle multiple_page_generator ≤ 3.4.0
Themeisle Multiple Page Generator Plugin – MPG ≤ 3.4.0

Kaynaklar ve yamalar