CVE-2024-5080 — WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server
Published: 2024-07-13 · CVSS: 8.8 · CVSS 3.1
The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files such as PHP on the server
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7