Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24981

Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Directorist – Business Directory Plugin

  • 7.0.6.2 to < 7.0.6.2affected

References