CVE-2024-56249

CRITICAL

Webdeclic WPMasterToolKit <1.13.1 - Code Injection

Title source: llm

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Webdeclic WPMasterToolKit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through 1.13.1.

Exploits (2)

nomisec WORKING POC 1 stars
by Nxploited · poc
https://github.com/Nxploited/CVE-2024-56249
github WORKING POC
by Boshe99 · pythonpoc
https://github.com/Boshe99/CVE-Exploits/tree/main/CVE-2024-56249

Scores

CVSS v3 9.1
EPSS 0.3961
EPSS Percentile 97.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Classification

CWE
CWE-434
Status draft

Timeline

Published Jan 02, 2025
Tracked Since Feb 18, 2026