CVE-2021-24160
05.04.2021, 19:15
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and ultimately allow an attacker to execute commands to further infect a WordPress site.Enginsight
| Vendor | Product | Version |
|---|---|---|
| expresstech | responsive_menu | 𝑥 < 4.0.4 |
| expresstech | responsive_menu | 𝑥 < 4.0.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References