← volver
CVE-2021-24240

Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE

EPSS 3.0%CWE-434
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →