WordPress Remote Code Execution via Plugin Upload (CVE-2024-31210)
ID: 15422bc9-7a07-512a-bea8-9237374d04a6
STIX ID: report--15422bc9-7a07-512a-bea8-9237374d04a6
Feed Name: Qualys Blog
Threat Score
Qualys published an advisory for WordPress CVE-2024-31210, a remote code execution vulnerability in the plugin upload flow affecting many WordPress versions prior to 6.4.3; administrator-level or Multisite Super Admin users could cause arbitrary PHP execution if the upload process retained non-zip files when FTP credentials were requested. Detection is available via Qualys WAS (QID 154154) and mitigation is to update to WordPress 6.4.3 (released 2024-01-30) or set DISALLOW_FILE_MODS = true to block plugin uploads.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.