CVE-2024-31114

CRITICAL

biplob018 Shortcode Addons <3.2.5 - RCE

Title source: llm

Description

Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5.

Exploits (2)

github WORKING POC
by Boshe99 · pythonpoc
https://github.com/Boshe99/CVE-Exploits/tree/main/CVE-2024-31114
nomisec WORKING POC
by Nxploited · poc
https://github.com/Nxploited/CVE-2024-31114

Scores

CVSS v3 9.1
EPSS 0.4866
EPSS Percentile 97.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Classification

CWE
CWE-434
Status draft

Timeline

Published Mar 31, 2024
Tracked Since Feb 18, 2026