CVE-2024-13418highCWE-434

CVE-2024-13418: high-severity vulnerability in G5Theme April Framework

Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload

Published · Updated

Follow this CVE+ Monitor April Framework+ Monitor Auteur Framework

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.8%
Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
G5Theme · April FrameworkG5Theme · Auteur FrameworkG5Theme · Benaa FrameworkG5Theme · Beyot Framework
Related CVEs — G5Theme April Framework

In the same product, most dangerous first.

CVE-2024-13420MEDIUMSmart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings UpdatesEPSS 0.2%CVE-2024-13419MEDIUMSmart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%