Description
WordPress Ajar in5 Embed 插件存在文件上传漏洞，攻击者可以通过上传特制的文件（如PHP脚本）在服务器上执行任意代码，进而可能导致敏感信息泄露、数据篡改或服务器被完全控制。该漏洞影响插件的文件上传功能，攻击者无需认证即可利用此漏洞。
WordPress Ajar in5 Embed 插件 /wp-admin/admin-ajax.php in5 文件上传漏洞（CVE-2024-50473）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-50473
https://github.com/RandomRobbieBF/CVE-2024-50473
https://wpscan.com/vulnerability/f943f511-1720-4e67-bb94-6753287ca6a6/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ajar-productions-in5-embed/ajar-in5-embed-313-unauthenticated-arbitrary-file-upload
https://patchstack.com/database/Wordpress/Plugin/ajar-productions-in5-embed/vulnerability/wordpress-ajar-in5-embed-plugin-3-1-3-arbitrary-file-upload-vulnerability
https://www.sentinelone.com/vulnerability-database/cve-2024-50473/
https://strobes.co/vi/cve/CVE-2024-50473/