Description
The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| williewonka | Imagements | 1.2.5 – ≤ 1.2.5 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Imagements <=1.2.5 - Arbitrary File Upload http/cves/2021/CVE-2021-24236.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.