File Upload Vulnerability in ACF Images Search And Insert Plugin by Takayuki Imanishi
CVE-2024-48035

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
Acf Images Search And Insert
Vendor
CVE Published:
16 October 2024

What is CVE-2024-48035?

The ACF Images Search And Insert plugin, crafted by developer Takayuki Imanishi, has an Unrestricted Upload of File with Dangerous Type vulnerability, allowing malicious actors to upload potentially harmful files, including web shells, to the web server. This can lead to unauthorized access and control over the server, particularly affecting versions up to 1.1.4. It is essential for users of this plugin to implement the latest security updates and follow best practices to mitigate this risk.

Affected Version(s)

ACF Images Search And Insert 0 <= 1.1.4

References

https://patchstack.com/database/Wordpress/Plugin/acf-imag...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.