Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24248

Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress

  • 5.11.1 to < 5.11.1affected

References