| |
Vulnerability CVE-2024-6366
Published: 2024-07-29
| Description: |
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. |
References: |
https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
