CVE-2021-24240

Description

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.

References

• Advisories

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS