Vulnerability Details CVE-2021-24216
The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.6%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
Products affected by CVE-2021-24216
-
cpe:2.3:a:servmask:one-stop_wp_migration:-
-
cpe:2.3:a:servmask:one-stop_wp_migration:7.39
-
cpe:2.3:a:servmask:one-stop_wp_migration:7.40