Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24179

Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress

  • 5.11 to < 5.11affected

References