CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2024-35746

Unrestricted Upload of File with Dangerous Type vulnerability in Asghar Hatampoor BuddyPress Cover allows Code Injection.This issue affects BuddyPress Cover: from n/a through 2.1.4.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.1%

CVSS Severity

CVSS v3 Score 10.0

References

https://patchstack.com/database/vulnerability/bp-cover/wordpress-buddypress-cover-plugin-2-1-4-2-arbitrary-file-upload-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/bp-cover/wordpress-buddypress-cover-plugin-2-1-4-2-arbitrary-file-upload-vulnerability?_s_id=cve

Products affected by CVE-2024-35746

Buddypress Cover Project » Buddypress Cover » Version: N/A

cpe:2.3:a:buddypress_cover_project:buddypress_cover:-
Buddypress Cover Project » Buddypress Cover » Version: 2.1.4.2

cpe:2.3:a:buddypress_cover_project:buddypress_cover:2.1.4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-35746

Products

Pricing

Contact Us