CVE-2021-24962— WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-24962
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE
Source: NVD (National Vulnerability Database)
Vulnerability Description
The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can then be used to upload a PHP code disguised as an image inside the auto-loaded directory of the plugin, resulting in arbitrary code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
WordPress plugin WordPress File Upload Free and Pro 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是WordPress开源的一个应用插件。 WordPress plugin WordPress File Upload Free and Pro 4.16.3 之前版本存在安全漏洞，该漏洞源于通过短代码参数执行路径遍历，然后可以使用该参数将伪装成图像的 PHP 代码上传到插件的自动加载目录中，从而导致任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | WordPress File Upload | 4.16.3 ~ 4.16.3 | - | |
| Unknown | WordPress File Upload Pro | 4.16.3 ~ 4.16.3 | - |
II. Public POCs for CVE-2021-24962
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-24962
请登录查看更多情报信息。
- https://plugins.trac.wordpress.org/changeset/2677722x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2021-24962
Same Patch Batch · Unknown · 2022-03-28 · 32 CVEs total
| CVE-2022-0600 | Conference Scheduler < 2.4.3 - Reflected Cross-Site Scripting | |
| CVE-2022-0846 | SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi | |
| CVE-2022-0833 | Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure | |
| CVE-2022-0818 | Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS | |
| CVE-2022-0787 | Limit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi | |
| CVE-2022-0784 | Title Experiments Free < 9.0.1 - Unauthenticated SQLi | |
| CVE-2022-0770 | Translate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover | |
| CVE-2022-0720 | Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure | |
| CVE-2022-0680 | Plezi < 1.0.3 - Unauthenticated Stored XSS | |
| CVE-2022-0679 | Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE | |
| CVE-2022-0647 | Bulk Creator <= 1.0.1 - Reflected Cross-Site Scripting | |
| CVE-2022-0643 | Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting | |
| CVE-2022-0641 | Popup Like box < 3.6.1 - Reflected Cross-Site Scripting | |
| CVE-2022-0621 | dTabs <= 1.4 - Reflected Cross-Site Scripting | |
| CVE-2022-0620 | Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting | |
| CVE-2022-0619 | Database Peek <= 1.2 - Reflected Cross-Site Scripting | |
| CVE-2021-24746 | Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting | |
| CVE-2022-0599 | Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting | |
| CVE-2022-0595 | Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS | |
| CVE-2022-0499 | Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: WordPress File Upload
- CVE-2024-39639
WordPress File Upload plugin <= 4.24.7 - Broken Access Contr - CVE-2024-6494
WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS - CVE-2024-6651
WordPress File Upload < 4.24.8 - Reflected XSS - CVE-2023-4811
WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site S - CVE-2021-24961
WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-S
Same vendor: Unknown
- CVE-2026-6433
Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection t - CVE-2026-4935
SureTriggers < 1.1.23 – Unauthenticated SQLi - CVE-2026-5335
Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosu - CVE-2026-5337
Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary - CVE-2026-5306
Check & Log Email < 2.0.13 - Unauthenticated Stored XSS
Same weakness: CWE-22
- CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path t - CVE-2022-50956
WordPress Plugin amministrazione-aperta 3.7.3 Local File Rea - CVE-2026-8215
Industrial Application Software IAS Canias ERP RMI iasReques - CVE-2026-42605
AzuraCast: Path Traversal in `currentDirectory` Parameter En - CVE-2026-42574
apko dirFS has a symlink-following path traversal that allow
V. Comments for CVE-2021-24962
No comments yet