CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It affects WordPress.
CVE
CVE-2021-24248
Severity
HIGH
CVSS
7.2
EPSS
1.58%
WordPress
Original NVD Description
The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
Related CVEs
Other vulnerabilities affecting the same vendor(s)