NetSight
high8.8

CVE-2024-5080

The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the ser…

Impact

The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server

Affected products

VendorProductAffected versions
Tipsandtricks-HqWp Emember
before 10.6.6

Weakness classification

References