Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-13117

Social Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Social Share Buttons for WordPress plugin through 2.7 allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Social Share Buttons for WordPress

Default version status: affected

  • 0 to ≤ 2.7affected

References