critical9.8
CVE-2021-24240
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an u…
Impact
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aivahthemes | Business Hours Pro | through 5.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://codecanyon.net/item/business-hours-pro-wordpress-plugin/9414879
- https://wpscan.com/vulnerability/10528cb2-12a1-43f7-9b7d-d75d18fdf5bb
- https://codecanyon.net/item/business-hours-pro-wordpress-plugin/9414879
- https://wpscan.com/vulnerability/10528cb2-12a1-43f7-9b7d-d75d18fdf5bb