CVE-2024-29135

CRITICAL

WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-29135 has a selected CVSS score of 9.9 (critical).

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Mar 18, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 9, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Tourfic

Browse Themefic / Tourfic

Default status: unaffected

CVE ListThrough 2.11.15affected

tourfic

Browse themefic / tourfic

Default status: unaffected

CVE List, VulnCheckThrough 2.11.15affected

References

3