Vulnerability · Published May 5, 2021 · Assigned by WPScan
CVE-2021-24248Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE
High 7.2
In plain English
A high-severity unrestricted file upload in Business Directory Plugin – Easy Listing Directories for WordPress from Business Directory Team. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).
Severity (CVSS NVD)7.2High
Exploit odds (30 days)1.6%top 24.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Business Directory Team | Business Directory Plugin – Easy Listing Directories for WordPress | 5.11.1 – before 5.11.1 |
Weakness: CWE-434
References
- https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001 x_refsource_CONFIRM