Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-11635

The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfu_ABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.062
EPSS Ranking 90.3%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-11635


Contact Us

Shodan ® - All rights reserved