CVE-2021-24160

HIGH

Expresstech Responsive Menu < 4.0.4 - Unrestricted File Upload

Title source: rule
STIX 2.1

Description

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and ultimately allow an attacker to execute commands to further infect a WordPress site.

Exploits (1)

nomisec WORKING POC
by hnthuan1998 · poc
https://github.com/hnthuan1998/Exploit-CVE-2021-24160

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://wpscan.com/vulnerability/066ba5d4-4aaa-4462-b106-500c1f291c37

Scores

CVSS v3 8.8
EPSS 0.6247
EPSS Percentile 98.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (1)
expresstech/responsive_menu < 4.0.4 (2 CPE variants)
Published Apr 05, 2021
Tracked Since Feb 18, 2026