WP Time Capsule Plugin 漏洞列表

共找到 1 个与 WP Time Capsule Plugin 相关的漏洞

📅 加载漏洞趋势中...

CVE-2024-8856: WP Time Capsule Plugin - Remote Code Execution POC

日期: 2025-08-01 | 影响软件: WP Time Capsule Plugin

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.