Search: CVE-2024-13448

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.9%	CVE-2024-13448ThemeREX Addons (WordPress plugin) · Unrestricted File Upload Critical9.8EPSS 0.9%2025-01-28CVE Database V5CVE-2024-13448 The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions up to, and including, 2.32.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. EPSS 0.9%Vulnerability CWE-434	CVE Database V5	2025-01-28

Page 1 of 1