CVE-2024-32836: WordPress WP-Lister Lite for eBay plugin <=…

Record summary

CVE-2024-32836 has a selected CVSS score of 9.1 (critical).

Description

Unrestricted Upload of File with Dangerous Type vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.5.11.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV: Listed · Apr 22, 2024 · VulnCheck
Reported exploitation: Observed · VulnCheck

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 24, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
WP-Lister Lite for eBay Browse WP Lab / WP-Lister Lite for eBaywp-lister-for-ebay Default status: unaffected	CVE List	Through 3.5.11	affected
WP-Lister Lite for eBay Browse WP Lab / WP-Lister Lite for eBay Default status: unknown	VulnCheck, CVE List	03.5.11 to ≤ 3.5.11	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-32836

patchstack.comvdb entry

https://patchstack.com/database/Wordpress/Plugin/wp-lister-for-ebay/vulnerability/wordpress-wp-lister-lite-for-ebay-plugin-3-5-11-arbitrary-file-upload-vulnerability?_s_id=cve

patchstack.comvdb entry

https://patchstack.com/database/vulnerability/wp-lister-for-ebay/wordpress-wp-lister-lite-for-ebay-plugin-3-5-11-arbitrary-file-upload-vulnerability?_s_id=cve