CVE-2021-24981

HIGHRansomware

Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24981 has a selected CVSS score of 7.5 (high). VulnCheck reports CVE-2021-24981 use in known ransomware campaigns.

Description

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 16, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck
Ransomware use
Observed · VulnCheck

Affected products and versions

2
ProductSourceVersion range

Directorist – Business Directory Plugin

CVE List7.0.6.2 to < 7.0.6.2affected

directorist

Browse wpwax / directorist
VulnCheckVersion data not supplied

References

3