Vulnerability · Published Aug 5, 2021 · Assigned by Wordfence
CVE-2021-34639WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File Upload
High 7.5
In plain English
A high-severity security flaw in WordPress Download Manager from W3 Eden, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 52.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Authenticated File Upload in WordPress Download Manager <= 3.1.24 allows authenticated (Author+) users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager version 3.1.24 and prior versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| W3 Eden, Inc. | WordPress Download Manager | 3.1.24 – through 3.1.24 |
Weakness: CWE-646 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H