jinhuang1102

3 exploits Active since Apr 2021
CVE-2021-24222 WRITEUP CRITICAL WRITEUP
WP-Curriculo Vitae Free < 6.3 - Unauthenticated Arbitrary File Upload via Profile Picture and Resume Submission
The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE.
CVSS 9.8
CVE-2021-24223 WRITEUP CRITICAL WRITEUP
N5 Upload Form < 1.0 - Unauthenticated Arbitrary File Upload via Form Embed
The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory listing enabled, accessing it is trivial.
CVSS 9.8
CVE-2021-24224 WRITEUP HIGH WRITEUP
Easy Form Builder < 1.0 - Authenticated Arbitrary File Upload via EFBP_verify_upload_file AJAX Action
The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE.
CVSS 8.8