CVE Database /
CVE-2024-30500
CVE · High
CVE-2024-30500 — CubeWP Framework [cubewp-framework] < 1.1.13
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-30500
|
CubeWP Framework [cubewp-framework] < 1.1.13 |
Unrestricted Upload of File with Dangerous Type |
High
8.8
|
< 1.1.13
|
1.1.13 |
2024-03-28 |
—
|
CVE-2024-30500
The CubeWP Framework plugin before version 1.1.13 contains an arbitrary file upload vulnerability that could enable an attacker to upload malicious files, including executable backdoors, to compromise a website. This flaw was identified by Peng Zhou and has been remedied in version 1.1.13 and later releases. Users should upgrade to the patched version to prevent exploitation of this vulnerability.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings