Upload of Dangerous File with Web Shell vulnerability

CVE-2024-50496

What is CVE-2024-50496?

The vulnerability in AR For WordPress manifests as an unrestricted upload of files with dangerous types, enabling attackers to upload a web shell onto the web server. This flaw affects all versions from n/a through 6.2, posing a significant risk as it allows unauthorized access to the server. Malicious users could exploit this vulnerability to execute arbitrary commands or manipulate server resources. It is crucial for users of AR For WordPress to address this security issue promptly to protect their systems.

References