WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload CVE-2021-24284
- Severity
- Vulnerability description
- Not available
- Risk description
- Not available
- Recommendation
- Not available
- References
- https://wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5https://github.com/advisories/GHSA-wqvg-8q49-hjc7https://www.wordfence.com/blog/2021/04/psa-remove-kaswara-modern-wpbakery-page-builder-addons-plugin-immediately/https://www.waltermairena.net/en/2021/04/25/0-day-vulnerability-in-the-plugin-kaswara-modern-vc-addons-plugin-what-can-i-do/https://lifeinhex.com/kaswara-exploit-or-how-much-wordfence-cares-about-user-security/https://nvd.nist.gov/vuln/detail/CVE-2021-24284
- Codename
- Not available
- Detectable with
- Network Scanner
- Scan engine
- Nuclei
- Exploitable with Sniper
- No
- CVE Published
- May 14, 2021
- Detection added at
- Software Type
- Not available
- Vendor
- Not available
- Product
- Not available
Detect & validate this vulnerability
Go beyond surface scans. Get real validation with proprietary tools designed to prove what’s exploitable in your environment.