Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-6366

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.891
EPSS Ranking 99.5%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2024-6366


Contact Us

Shodan ® - All rights reserved